From patchwork Fri May 8 07:10:54 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87687 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 0B17DCD37B2 for ; Fri, 8 May 2026 07:12:18 +0000 (UTC) Received: from mail-wm1-f45.google.com (mail-wm1-f45.google.com [209.85.128.45]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.8219.1778224329793766196 for ; Fri, 08 May 2026 00:12:10 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=JSx4brMH; spf=pass (domain: smile.fr, ip: 209.85.128.45, mailfrom: yoann.congal@smile.fr) Received: by mail-wm1-f45.google.com with SMTP id 5b1f17b1804b1-4891b0786beso11458665e9.1 for ; Fri, 08 May 2026 00:12:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224328; x=1778829128; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=BPXUjhs4tYiRyraGmKPgkF0ZgqlbmkoObJrlURW1bGc=; b=JSx4brMHzhTLKeQJ72OA/97VhR8Qa6TsSsW196XhnFzrpjEqHRnfQKaSAGXvFFkQVM L/rOS+Fs9Kj0Y0HHY/Jm0s+c8YQ566Wm/T8bkvzWC3b/2jR3RbQD7G7xR3kvyg5O494h GQoYWsEiujILOeNfiAboEzaZq3JxwZbJ8seXc= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224328; x=1778829128; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=BPXUjhs4tYiRyraGmKPgkF0ZgqlbmkoObJrlURW1bGc=; b=pzj8rZIP8vGEgS+mKS5QPKDpXEa7ReD5idpMPgiO+7Bdy7b/KNy56tmxFvsrSKzw3J zhgM2twINhVPa2Pfpyojohk5o5x6EAnRtawgspvo/B8vDPu1+g1JL/iNekj4ABfI3kIp ltiHyVPDokafg7nzCS4zAUxpznMoRkmZTmh9v2fjZXp7uVOdSEwYzbsxdNHTrR1GvdFL kkpdzevBQH0wpd+nnCYP55C8v0yCCIx96RfMDHT1N8LIraDHJAsj/ruLb7s9PlxeSav+ Igpaw1mlWovoW9eQysENf2D5cbV59cO3Bgcr4ipu06Jt9t1kf7j7grkaNoF4a/cWrErO FvfQ== X-Gm-Message-State: AOJu0Yw8OElb3xJXZLTlbucvtIBEo0w3Fn0cWUAjzGhlfaAP4GrSo4T9 uu4e+cs+NfZTNkM9/5oAUHplSuVut5vxzuXQMylm3JQy1lCMAmE4sC27p3GKco610raSdQd3eI8 mXCDTL9g= X-Gm-Gg: AeBDievT40Tf2DxwPaivq6ulC51rkbfhHNBOEYBIHgiQZ+fPOokcauLoCKk/cOOy+Xs HYAGjoJDEGYPanDeWPOxppaSaMBW0at4hSGlAJX6KOHYLgg8hqpPaZ/ZP5H64pSr/hTlPkBZ3rg NgqExaKOEAwtFpnkMrH7bJcQ/LN7dsodTVsRiyImL/NbaBNhEWy9nSpFV548NACqy6T47Dm8F48 I+LOYAQDZKipnrenzEwNhg98QAzAHfqSOwcas7jHIOCNrGE/lgc4C+UIstHInmsVw5zBVMDGYiM /SXCpDuaa72pFgOr4QHbDakHSLzMvCwPB+tP8SYAITf8P9v5NN0DM8Fk+zwGXsWsKJy5gY8dHYp HzOGonSrgDAeXv44xplsLcijyq9DPQaKQy8kesrXFZ8hLY5+MEshpEh7qPo2hclgmepvG+4XlqQ LIpoCLRhDdvQD3tFpAYFLIy7S851rFuVs46LyyfmqSV/uQKRu92ZQmhTFDkehY+SIv8BxVmG5PH EVAGhIpxSAbaAXJyXDPtQlTH+A= X-Received: by 2002:a05:600c:4e0c:b0:48d:46a:6e5b with SMTP id 5b1f17b1804b1-48e51e19110mr192315015e9.7.1778224327781; Fri, 08 May 2026 00:12:07 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.07 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:07 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 01/52] shadow: set CVE_PRODUCT Date: Fri, 8 May 2026 09:10:54 +0200 Message-ID: <402718fdfb77d4ce0e1eb018ce17cfa162599645.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:18 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236643 From: Peter Marko This will remove CVE-2016-15024 from open cve reports. This CVE for is for "doomsider:shadow" [1]. It will also remove * CVE-2018-16588 (suse:shadow, [2]) * CVE-2019-16110 (blade-group:shadow [3]) which can be verified that they don't affect Yocto shadow. [1] https://security-tracker.debian.org/tracker/CVE-2016-15024 [2] https://security-tracker.debian.org/tracker/CVE-2018-16588 [3] https://security-tracker.debian.org/tracker/CVE-2019-16110 Signed-off-by: Peter Marko Signed-off-by: Richard Purdie (cherry picked from commit 2946e238d2a3947c1a51c4ac1c86c8284f68e4cf) Signed-off-by: Yoann Congal --- meta/recipes-extended/shadow/shadow_4.19.4.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-extended/shadow/shadow_4.19.4.bb b/meta/recipes-extended/shadow/shadow_4.19.4.bb index 94f155641cc..f70d1ca5f38 100644 --- a/meta/recipes-extended/shadow/shadow_4.19.4.bb +++ b/meta/recipes-extended/shadow/shadow_4.19.4.bb @@ -38,6 +38,8 @@ PAM_SRC_URI = "file://pam.d/chfn \ file://pam.d/passwd \ file://pam.d/su" +CVE_PRODUCT = "debian:shadow shadow_project:shadow" + inherit autotools gettext github-releases pkgconfig export CONFIG_SHELL = "/bin/sh" From patchwork Fri May 8 07:10:55 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87685 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id C3AC4CD37AC for ; Fri, 8 May 2026 07:12:17 +0000 (UTC) Received: from mail-wm1-f46.google.com (mail-wm1-f46.google.com [209.85.128.46]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.8150.1778224331277031862 for ; Fri, 08 May 2026 00:12:11 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=q4J72XSf; spf=pass (domain: smile.fr, ip: 209.85.128.46, mailfrom: yoann.congal@smile.fr) Received: by mail-wm1-f46.google.com with SMTP id 5b1f17b1804b1-4896c22fcbaso15482335e9.0 for ; Fri, 08 May 2026 00:12:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224329; x=1778829129; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=ifQscOr9HiUyn6wLZYb6mIWmOjTyzmwCeb5XCuk/Fpg=; b=q4J72XSfk2KujYpE5974PZiJU3V0ue0fPgE1gci7gO1sCHS0VB3qGjpl4Rg29eEII1 WTl3HNs9WOVrpmaWgpOr5cthfGPX5rnf/oKTsF1xxWs4NFNxo/XWbLjnj4/cZBiD45Ey yam6QWjxNXSqtbK30Rsh4O1XsYWNbfH1KPLp0= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224329; x=1778829129; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=ifQscOr9HiUyn6wLZYb6mIWmOjTyzmwCeb5XCuk/Fpg=; b=PHYL7PSXzZOtMICfGCWcVFPwTu33hEuRjBGs3A9gOwJL3Q6u8VMIYNSnFC5CeIpMK4 +HrcZrGL1GgE++GEV84L7Exe0iD9l5LUdPAN2ZbL7iJnm9drQsbk/dt3hjTSxWdDjxhk +QQCCVy3o56lx8qdVMyHqH5rBSongc6oftfNEFwXU7XTQpRxpNvYDl0+V6TGnMnvwZ/x zU3vFxI2vd1SDBbm6FuI2UcQT4/AwjvaYjhLJb3PhdqgfUpjoM7Y3jIL6A41cvFInfWx z+uHqKnxtW9KNFevWs0hV2nYBsGtRxzmcqYy9Ebw/gM18MRsimEBhUEe/qaW8UU1Lzph b87Q== X-Gm-Message-State: AOJu0Yx+ffATvsqqjUXvUATwH8e2OzdWW7y44bsEtRFMqksceGik/PlL RXuSjH0qwbWhXGrjhv3PuRNDPo6l0p4K8O7Q+63TnRCzANMzBwrI9gtIjsjfn8Ai+J0eAIdi9IZ 1Z9LGBOM= X-Gm-Gg: AeBDiet921twHSSEno0etVTuHKP9fAr6nb/oXKJfCmEZdnL/7EytUaB8CDycu5+gUct /Jd0lZS3uotXJN+H+oGXu/mFTcyzcdf+u3gpzDaPFx7AjLiAoveYZ+oRo2QvPwluGWtQmDx37zh zLp82mu34Y/TFUAuCK7m+6rSvWIC1Fu7t/hruKL/MYnCURpOXnqO/j3DfAX/towjQ7/z1tBw00k YkUEsAPJs/TgawPgOCumE4Rar9oNMcQ7g1/hsb5rrUlcM3JvQ1Ffew3qeiknpN2kH3KwFUodwGM EFTXRx3p/G8rXM6hnxK5JRZAynw+qVfKmgWcu/KdVG1HF905/+eTvUS6ZkCqbx/QPqvujkT3MPi ghX+P8DIHLNapF7keup+dQX+UAJt0CDLgzZ2m6kUGGjdN5lqTXFwk6bpcKR8LN0cTule9oHE09/ JUj8CWJStmYZe3HntIU7YhtEQfwGI6sBGNo7tVFlyhSc2rtnyRjLHn32HlH/99o/iFqOpyu3Hj7 rSQUU+HTOweJeL+KMi+rv/0xPk= X-Received: by 2002:a05:600c:a30a:b0:48a:58ae:9938 with SMTP id 5b1f17b1804b1-48e51f37f28mr132401815e9.19.1778224329204; Fri, 08 May 2026 00:12:09 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.07 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:08 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 02/52] ruby: set status for CVE-2025-0306 Date: Fri, 8 May 2026 09:10:55 +0200 Message-ID: <90b45f5699ef1191a8ffb672c2f926780375c0b4.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:17 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236644 From: Peter Marko This is a version-less Redhat CVE, so explicit status is needed. Per [1] the issue is mitigated by using openssl >= 3.2.0. [1] https://bugzilla.redhat.com/show_bug.cgi?id=2336100 Signed-off-by: Peter Marko Signed-off-by: Richard Purdie (cherry picked from commit 5e03d64e32dce88d78dcf59429ea8fec475ea318) Signed-off-by: Yoann Congal --- meta/recipes-devtools/ruby/ruby_4.0.2.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-devtools/ruby/ruby_4.0.2.bb b/meta/recipes-devtools/ruby/ruby_4.0.2.bb index ba24e8601ce..89d8d5b1551 100644 --- a/meta/recipes-devtools/ruby/ruby_4.0.2.bb +++ b/meta/recipes-devtools/ruby/ruby_4.0.2.bb @@ -140,3 +140,5 @@ FILES:${PN}-ptest:append:class-target = "\ " BBCLASSEXTEND = "native nativesdk" + +CVE_STATUS[CVE-2025-0306] = "not-applicable-config: issue does not occur with openssl >= 3.2.0" From patchwork Fri May 8 07:10:56 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87686 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 6A43ECD37B1 for ; Fri, 8 May 2026 07:12:17 +0000 (UTC) Received: from mail-wr1-f41.google.com (mail-wr1-f41.google.com [209.85.221.41]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.8151.1778224332613028091 for ; Fri, 08 May 2026 00:12:12 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=EI0obvYT; spf=pass (domain: smile.fr, ip: 209.85.221.41, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f41.google.com with SMTP id ffacd0b85a97d-43d64313c39so1284472f8f.3 for ; Fri, 08 May 2026 00:12:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224331; x=1778829131; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=Zqj+TJTPvu8UrWH2S5VysZnH2EN4lUIqnoPQlzuZdwo=; b=EI0obvYTceDQTpJEx5QWw2qbsi7WUgcy7T8qKN9uEYatsPRlw1opdp2UzFkzizqKZL t+zmcZoTRgrZ8jrSeaF5zMxGOQHrmYacttXqpLXe4wUlv6cDBP7sgyD6PLk710nzPwfc WGkzrAvcnw+BdUGCemQOLvzRc4QkiC09s26XQ= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224331; x=1778829131; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=Zqj+TJTPvu8UrWH2S5VysZnH2EN4lUIqnoPQlzuZdwo=; b=R5MNY5uqVUqwLGG/Vq9JJCboxWiSIbrJLLd2byDb3FlAqTqEgApFaro8VeOLrphXHl YRadzB9yOOzwza/1+QUtOk90XANaBaSlEQhdunu15eRd4fKSLcN6Wnzbty1u3VWxydFV WBtbTPPCTdG6OEzmUL8EO6mSDa7VYRW5i4QHWWKg/RYEK0YOYx/GBNa25O+axRTYUMCk G7G4iPTJ5DLOZclv95lcDOam1TI59bYLOMyESeTjrDZj/cRL+IXrKECba+OrWKH32rFK XQkENXJko40/u33jfhQKUagV7cqcMazLVX79PbsvXJ5CB8+W4rW+EPdmavRvNJFTfjJI pjww== X-Gm-Message-State: AOJu0Yw3psVdcUz9pOAv8mD6IZx4fSCd1INiwBxzLPYkXFxP0oLASKgQ Jx7Yrh5awTiPiKbclacoN2tFnqyb7eN6Go6eONNFCHj/Gv+YgFP89AIIwUopLkcYvCKgIwtytq9 fU4C0zXI= X-Gm-Gg: Acq92OGKOMFQJePAmKuD3/1v56oBjLUtbVT2cOVxt+i9fOlZD/+i1Fn8HX9QEzCc7o8 w6V3e02bNCUtdW9itU97g5X0C47uxnAe8utXi2VVUjnsQ6NLTAIkxr5m8XOW4Us7qsmisN47plA GqER1lZIZ11WColIvTcp7YaRhvxbKpvNwp2mOd/2sXG4x/7QlszqMRIHAeDI1fPTqw9nXmekUP4 D+VUeULum1dIi4m7IU4mzDhMvYFSF7oJcZvKElVmp2PnW0KWkDnBQuAN9HAGTvVUuxE2A9kAI0X LE0qrlZOvdyI5MXGKYDQMUg5GJ/GqBPSWVlnG3LQ1a7UUEGzKXzK2yD9PednWkZRUq00jw5VccO uV+BhMIk0hQNPM2zK7CA4YB6syLAHa8x2ANJhVQg1TlghZwmLtY4+V9BgdMomTZQ/cLy37stDUX TRea7gmVpUPn5kvBf1l9z//AtLrBmD4x0tAFBur0It1dzS1QYk5B8HzxFTJ4CDzD4q8hB6Md84O V+0Bw53VaZ9VGVUxYK88SUrXOk= X-Received: by 2002:a05:6000:144a:b0:439:beb9:5a96 with SMTP id ffacd0b85a97d-4515d3dc683mr19507165f8f.31.1778224330583; Fri, 08 May 2026 00:12:10 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.09 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:09 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 03/52] python3-setuptools: set status for CVE-2024-6345 Date: Fri, 8 May 2026 09:10:56 +0200 Message-ID: <0e2a61f133d5d9a3eb04bad9c4179dd3510b8e85.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:17 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236645 From: Peter Marko Current version of sbom-cve-check reports this for some reason. NVD does not have CPE and cvelistV5 ([1]) says "lessThan": "70.0". [1] https://github.com/CVEProject/cvelistV5/blob/main/cves/2024/6xxx/CVE-2024-6345.json Signed-off-by: Peter Marko Signed-off-by: Richard Purdie (cherry picked from commit 8d03ae7b6e25c4ef3953c3fe49ca0c939296d222) Signed-off-by: Yoann Congal --- meta/recipes-devtools/python/python3-setuptools_82.0.1.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-devtools/python/python3-setuptools_82.0.1.bb b/meta/recipes-devtools/python/python3-setuptools_82.0.1.bb index a3943a29c39..c413578faf5 100644 --- a/meta/recipes-devtools/python/python3-setuptools_82.0.1.bb +++ b/meta/recipes-devtools/python/python3-setuptools_82.0.1.bb @@ -49,3 +49,5 @@ BBCLASSEXTEND = "native nativesdk" # This used to use the bootstrap install which didn't compile. Until we bump the # tmpdir version we can't compile the native otherwise the sysroot unpack fails INSTALL_WHEEL_COMPILE_BYTECODE:class-native = "--no-compile-bytecode" + +CVE_STATUS[CVE-2024-6345] = "fixed-version: fixed since 70.0" From patchwork Fri May 8 07:10:57 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87683 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 4B3BECD37AF for ; Fri, 8 May 2026 07:12:17 +0000 (UTC) Received: from mail-wr1-f45.google.com (mail-wr1-f45.google.com [209.85.221.45]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.8152.1778224333952868148 for ; Fri, 08 May 2026 00:12:14 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=SWNiU0B6; spf=pass (domain: smile.fr, ip: 209.85.221.45, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f45.google.com with SMTP id ffacd0b85a97d-43fe62837baso842649f8f.3 for ; Fri, 08 May 2026 00:12:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224332; x=1778829132; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=estr0t8a0j3fmdi6rpwywrcymCX0gJBpTw/ilo2H0cs=; b=SWNiU0B6sHbROcBxVfMBS2OB0qHV80nA/NXT1WUBXAxcASi5q8kfZPCC/OcQavxRm0 U0SinaDR5H4sxSupeFdLtPUcjIoYyODDgpnk8UsXXgCxTb2TvlarHAEEnt875DCq+qS6 3d3mmEvnKYzmPa0npkjoI998Xk12ISJt1KvTc= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224332; x=1778829132; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=estr0t8a0j3fmdi6rpwywrcymCX0gJBpTw/ilo2H0cs=; b=E3rrNT93WX5EAWj09f2+OuSR89vJdF2CZdaOEHnMJJmzfWvxe8Ga7djqFI3DkBUZCy OnhnhJPFK3rB4+L97w8Jzoa+9hQIjm1ucBbboGi5NqBxm8nQ4GK0tJj8vhzKLEl2zgBQ ycHCt/hUhEDTgMTgIy1ykdza+/aDhJWCR5KYYXd7dxUmbvJhONJ7t3PF80MZc4k26o8o TQKE9fR/9ZCIuMbmLRqi5AV6MdcsLeVZS5DrM3jgLUIWYEEixu6R/qidjpOxmHo5BsOY YL5dJy+A8LYc2UdxDLqcfWex1um27iWOJXLW50AppL/+PJfxHKyKvWDFKTQzm0LKUqSh 3/cw== X-Gm-Message-State: AOJu0YyVd6dLo9QgOcDOWojcabims1vrF4r3SP0VnXibzZWqztbnK3pY 20u4zQxXC1yxVLwfAWbvdZ/Z6Rk/8WkMlJsWQuLezrqBSI7Qgj67EnUVdD3qQ91/0uhhPUSba4S LewNlWTo= X-Gm-Gg: Acq92OFvOOaghW/TIj8B//1jw8/8pdAiQtLDbCeSX7PiQqEXg7tXyt3MM27vgkGlqIJ FWyooq4/tluTAu6YTUKjKvQAfNdTTshpVV2dNLpmYuYhebPhBFwAUdN/p1yQIT9RJhANuT8/W1F 8ybt5XHhLzpwDCDZiPEwJZf7A2g+AWa24A1bzScuPopDoCperV3JXLkmoWIEc7ICm9FBL6P1f89 9lZ2lU8pWiYW5PcCAyuHYg5K8QV2qUo6WRvYhZvQB6eyYI8nSk5oj8fhtExV2K+WAyM76F/6Z40 c50X0qEI8PyqKToDLjAh1p1AgmfjCjKBhgkTtclC4rb1z0Qr2Qbx31L8vcbLzYeQjceU6Vu2kxk QbtF9WI9pOQsLDooefRDU8PsvzJZIPZNteleyzTEXDZqtLM11n9jgmF0YvTgoRzKbCbasbXqLWw 5zZr9wgIUqu/xGkN0bMXLZqqPQyKjuzB7IUusG9GhJ1WzzHBqOh3P2qZ43iT38AWo6SoL7C//ju 9wEtQ4LOjvmdQNtiBngAn7CoCI= X-Received: by 2002:a05:6000:2405:b0:43d:7ba4:6b5a with SMTP id ffacd0b85a97d-4515cf12664mr18159285f8f.22.1778224331673; Fri, 08 May 2026 00:12:11 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.10 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:10 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 04/52] p11-kit: set status for CVE-2026-2100 Date: Fri, 8 May 2026 09:10:57 +0200 Message-ID: X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:17 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236646 From: Peter Marko This is a Redhat version-less CVE in NVD DB. Per [1] this is fixed in 0.26.2. [1] https://security-tracker.debian.org/tracker/CVE-2026-2100 Signed-off-by: Peter Marko Signed-off-by: Richard Purdie (cherry picked from commit 343048c84f5a83c258ea6a5279a9cf2f1de781fe) Signed-off-by: Yoann Congal --- meta/recipes-support/p11-kit/p11-kit_0.26.2.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-support/p11-kit/p11-kit_0.26.2.bb b/meta/recipes-support/p11-kit/p11-kit_0.26.2.bb index fa41b45feb6..5f553f11bbb 100644 --- a/meta/recipes-support/p11-kit/p11-kit_0.26.2.bb +++ b/meta/recipes-support/p11-kit/p11-kit_0.26.2.bb @@ -42,3 +42,5 @@ BBCLASSEXTEND = "native nativesdk" # git/p11-kit/import-object.c:229:70: error: passing argument 3 of 'p11_asn1_read' from incompatible pointer type [-Wincompatible-pointer-types] # git/p11-kit/import-object.c:264:78: error: passing argument 3 of 'p11_asn1_read' from incompatible pointer type [-Wincompatible-pointer-types] CFLAGS += "-Wno-error=incompatible-pointer-types" + +CVE_STATUS[CVE-2026-2100] = "fixed-version: fixed since 0.26.2" From patchwork Fri May 8 07:10:58 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87682 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 2508BCD37B0 for ; Fri, 8 May 2026 07:12:17 +0000 (UTC) Received: from mail-wr1-f43.google.com (mail-wr1-f43.google.com [209.85.221.43]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.8153.1778224334629781654 for ; Fri, 08 May 2026 00:12:14 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=FZITgOwf; spf=pass (domain: smile.fr, ip: 209.85.221.43, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f43.google.com with SMTP id ffacd0b85a97d-43eb05b1875so1001517f8f.3 for ; Fri, 08 May 2026 00:12:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224333; x=1778829133; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=iwEGFUCnEYSoR6SkU+6QfRp67/oV8LhCGjrbhU5hzhU=; b=FZITgOwfA97H0ya/1mIfS5AfU7G8OKWEmtaa4EkVrJ3R65nr8k+h4dH3QxZk2i1cFg v6kFNkX+IjWB4Shb8Q3LFvfzwhMBJLdBoja0Ibfi2fiH3eSQfDfx/jt9+5mYTfekY4us 3k4SwS7cmpFCbEle6RTVDYoliWPRjr4fOJtvA= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224333; x=1778829133; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=iwEGFUCnEYSoR6SkU+6QfRp67/oV8LhCGjrbhU5hzhU=; b=GTcTKiZuaLwLsxoblP+ZlnE2JgBzbQZXT3wiFEQ8mVS5k12IFkkbAAnKMcnwBYBvt9 zFbapgr8ra0X6ZC9fwyvski8PB7fA8Z7igcIJl41Q9Uzy68WN8hCe5JWUAv/6oeTW+Ch lRMKHiwpgL+qztsxgo6C68EZOSLBV/LgnpsdRz8IvjgXI8h3heSSvysv+810jJCjncuL /VY37PTqWC+/t8EQSG+Og9lE86EO6DO0YuIrtPpEDcrtDlZX5zW12d0LDZsrGNRnnU9d 4coYH8N1S58MGF2xSkvzchLesCt/y/L5ejokNGd0IT5dz6VSTP5wLzXwVJG02kDlF7km d+aA== X-Gm-Message-State: AOJu0YwM3qDa0DLPlzsdqhpfBYGTaOwfpchemJ5y6K/uIaGsH+2GPzzP xql3qcOKTgenRuCVJfx3i5j7E+n4JF7zwbjiC+Xqntj6tzEg57P4sU1fBi4VYR4+ew4ffpQg/7r w59rIABk= X-Gm-Gg: Acq92OHekIScGA2Np399A85r9/T1bNwQtONJJPItPo1/eumdXbO+GD6v17gmT9KZxDP b4V/nmW6AkzoLSF8lWgSsn2oNYn2M0WnqMlJGG6iZU2mN8/LxcbdlOaZNyUiT5Ylk8H7jpNkwuz /8v56nkm6WfO2432O3wggcsjUMz19j08V5bAPLQF2ItNb/ZhmLgK7x/tRusclT2ds93SUNzmwzx 52IfQvHSB2tznXXa71HMOHOocljoOIOtey5rPPxvkvYytd8T8dTs4FsQ4FGEpKKfijOwE9dTTIH kjunnlaBKnOOs1By+1ERpuCDqNfsQW8zzKF8miStYOoh3uXFV11qXW6PVE2Aty3NJtofFs9u+VO z59dqsytrNfGTleLeJpNaAUsQzOz8HAwQP3qfVsHvAPQZEWnfaYHG9aCZ62NPqZxTcXph6vQGyy JV99Y01apOistKNVbPw05GZIIyovb3sPW+sa9Oe7AbTzBoix9dBYhpBsyL8jMrDvPKouEuyNn5x 9xXENznORpigKAfnpSgFE7i8c0= X-Received: by 2002:a05:6000:2387:b0:43d:6e0:9458 with SMTP id ffacd0b85a97d-4515da97835mr17385595f8f.39.1778224332500; Fri, 08 May 2026 00:12:12 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.11 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:12 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 05/52] libva: set status for CVE-2023-39929 Date: Fri, 8 May 2026 09:10:58 +0200 Message-ID: X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:17 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236647 From: Peter Marko This CVE is reported as open because NVD has no cpe and cvelistV5 has unparseable "version": "before version 2.20.0". Signed-off-by: Peter Marko Signed-off-by: Richard Purdie (cherry picked from commit bfb379ea1a9cae0ce1c4c387d1803b740d4056ad) Signed-off-by: Yoann Congal --- meta/recipes-graphics/libva/libva_2.23.0.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-graphics/libva/libva_2.23.0.bb b/meta/recipes-graphics/libva/libva_2.23.0.bb index 63dc5af8f29..39a80db7f86 100644 --- a/meta/recipes-graphics/libva/libva_2.23.0.bb +++ b/meta/recipes-graphics/libva/libva_2.23.0.bb @@ -13,3 +13,5 @@ RDEPENDS:${PN}-glx =+ "${PN}-x11" FILES:${PN}-x11 =+ "${libdir}/libva-x11*${SOLIBS}" FILES:${PN}-glx =+ "${libdir}/libva-glx*${SOLIBS}" FILES:${PN}-wayland =+ "${libdir}/libva-wayland*${SOLIBS}" + +CVE_STATUS[CVE-2023-39929] = "fixed-version: fixed since 2.20.0" From patchwork Fri May 8 07:10:59 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87684 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 0A418CD37AA for ; Fri, 8 May 2026 07:12:17 +0000 (UTC) Received: from mail-wr1-f44.google.com (mail-wr1-f44.google.com [209.85.221.44]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.8222.1778224335475484795 for ; Fri, 08 May 2026 00:12:15 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=wVlFTG2d; spf=pass (domain: smile.fr, ip: 209.85.221.44, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f44.google.com with SMTP id ffacd0b85a97d-452169ae568so1266780f8f.3 for ; Fri, 08 May 2026 00:12:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224333; x=1778829133; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=s5i4FASJM5UrUSvkZaEwviFd5SrPTkl5qVLTTJc/Jac=; b=wVlFTG2dgKX3zclLwC2PgFuBXQ3e7+ler45SJrdnEC0k40uilgUBBoBchMd9n4pcbQ plYxZfF/zDZbwTyXvoh3fosUSP747diyJBqtBzBTjpqxYBkSkHzVp+n1pt2pM5PU1oyD u+PaBgIXtkxTzDZA2cFsbsN+iQdzmpGrWOzwU= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224333; x=1778829133; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=s5i4FASJM5UrUSvkZaEwviFd5SrPTkl5qVLTTJc/Jac=; b=DOiqbJpQ/3OueZHmQEjL+3R3nTkBSRHwCJmHhcRcA6q5/bbETSg9UVWUWoHsfU/b6D PePJC9yPTV1KNGvx3n3l1Hso9DCx091QfR8/goKj4BSUlVxHtpktP6mqf242MWzCwW1e G0rrV/WtkAYNOdq4tMt/0o9wGDzoNvAxR7BMkZBzTIwtQtUVOv3V4PWoowAq61lQaCPd cy5eMREsAoHOhgCy3Cf+4jSumY0zevl3aqewcgzPmNgRFvO1X1UzWnZhhxPgz+6hPmF6 TPDx87AKSyzRzrrLu+apuYtXwQxyu2cWP9G/6MUQ1j2vqwpi3SpGYaD7zWRVGnoLkDsj oxKQ== X-Gm-Message-State: AOJu0YwGJO4bDYWHOHxpiaKmZMNFBqvYoHmDi7WxRjNv/ws4emtGwfp6 gC9O0V+tkIvrBL74sS86tRGyLLJlnOyzE+ut2tWyV+ibkhvA9QTMOb/blrVxySrhRaat2m5nUeN QMRCfgCE= X-Gm-Gg: Acq92OFQ4s7EkR0QX3NnIdEWK51dkEQLcFaJnzae53b0tyx9zby/uA/JMfA6malUt3l LD6f65ZdAzAY3bIh5GW9glkSkbIM3yEZCAVg+u42DhwbP1tSQMDPNcJxHP46RZUvfiGfUMQr4Gb SvMhieJUc4QbpBHfDAluiM1ndljrrQHeMMvQuR/wz6e8y5wg7xiJBJK69B0eFQagC5uZXrFmUNF KiQAGeH7lWBSEr9f19I0fSDsSU7WoQUaWlrWdPfDEgAH4ckXDAHVvMUZ0V1ycMTgYOySpyvGt6I rtWN892F2QIK558bpieBqtwCOrYMLuUHF3d3pG5XQNvdNHXFvT4U6ul12Rnfm2sixJyGya++eTl bYLUt1HeMmTFL6letSfdw8iSzFT7rY9sz67kfCk4NvSsK1UgXrTUiHFPykHhkgIuTLuPJep73JP Mx4oUyEZ7URZbM8mj8lOderETT0LpahACkiNhfpqE25ubZra8CD9PDFjqakUpkPXjz5dImTWJhO T3Xo5SDNLHGDca4Rvfw+RA4to4= X-Received: by 2002:a5d:64c9:0:b0:43d:7d24:b510 with SMTP id ffacd0b85a97d-4515ce1c3f0mr17420826f8f.22.1778224333234; Fri, 08 May 2026 00:12:13 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.12 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:12 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 06/52] harfbuzz: set status for CVE-2024-56732 Date: Fri, 8 May 2026 09:10:59 +0200 Message-ID: <2e95f4be90916b10c6ee15245cd0937323169254.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:17 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236648 From: Peter Marko This CVE does not have cpe in NVD DB. In cvelistV5 it shows "version": ">= 8.5.0, <= 10.0.1" which is not parseable with our tooling. Signed-off-by: Peter Marko Signed-off-by: Richard Purdie (cherry picked from commit c5a3d5d58f4886d5c6334c3e8046ac4fe9b8eed6) Signed-off-by: Yoann Congal --- meta/recipes-graphics/harfbuzz/harfbuzz_12.3.2.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-graphics/harfbuzz/harfbuzz_12.3.2.bb b/meta/recipes-graphics/harfbuzz/harfbuzz_12.3.2.bb index 12bebc4bee4..6ce275acb59 100644 --- a/meta/recipes-graphics/harfbuzz/harfbuzz_12.3.2.bb +++ b/meta/recipes-graphics/harfbuzz/harfbuzz_12.3.2.bb @@ -50,3 +50,5 @@ FILES:${PN}-icu-dev = "${libdir}/libharfbuzz-icu.so \ FILES:${PN}-subset = "${libdir}/libharfbuzz-subset.so.*" BBCLASSEXTEND = "native nativesdk" + +CVE_STATUS[CVE-2024-56732] = "fixed-version: affected versions are >= 8.5.0, <= 10.0.1" From patchwork Fri May 8 07:11:00 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87680 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id EECA8CD342F for ; Fri, 8 May 2026 07:12:16 +0000 (UTC) Received: from mail-wr1-f44.google.com (mail-wr1-f44.google.com [209.85.221.44]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.8155.1778224336279541993 for ; Fri, 08 May 2026 00:12:16 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=Gcb6xLqB; spf=pass (domain: smile.fr, ip: 209.85.221.44, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f44.google.com with SMTP id ffacd0b85a97d-45297094718so1336005f8f.3 for ; Fri, 08 May 2026 00:12:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224334; x=1778829134; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=gMB5OfmAxcl3j8ry3TQG+LXR5PhFVOTwV41akQALLIs=; b=Gcb6xLqBHGENrjPtYmI2jVm5oDhNuqDQSCsTdQqxCrQHEeFaacz8EY4ukNbmF0GoQj uuRLNePJxqfPJLHSKrgxUSBJtiuAbkwisc5wPPv8nWga2ZIENeYAkqYoARvdsaYFcem7 Zaz51eDDW+Y/K7eardhEjJbZ8hdqBkI7/ae4w= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224334; x=1778829134; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=gMB5OfmAxcl3j8ry3TQG+LXR5PhFVOTwV41akQALLIs=; b=W90B4EzMOmClecESrp2i4k+dAcOGjYMhGIPQARZtffR+64rWIq99ej94c6UKTWKF3n K0iFWYWGKUAuXXy6KeMWrkottApljxgBvAa8ylMz3hP7As3uVTdYLbMNQ3+CHsW219DZ 67RIULu1L4wdBaDn0uyUTgYV7dY3BId+PJhqrrsdhkUW7rtx8/ZDbOdn3SrVIApDLbNP 1HptiTdaSDPeXQ1hiKigWaIYNYK77Viwoc11am0Oi9L1Nn3JowFAhbbmYHy5QSrSEnXg tyc8fEnbbHvbFHiNgTTAbJmbddGdsP+eDD+0cBKYu+wdAKfyf9M5HZOmx18FIC9MaoyK ALtQ== X-Gm-Message-State: AOJu0YxQcpi/lM2nOyduhu/QvcGz8yTOJmxXROPMNJZPQgzVNInpKJEr XlwG73nfWejz2X0YyYcy1LRJ8dBoSPzsjm7mPGidcDCWOwys5k9qB9bvmdh3MSSSPvItdWt4tMj kE5u8DTI= X-Gm-Gg: Acq92OFeD4R5ODcbWZvrU+92Ix/Ybtynegj+Rm8uVgA7WKT1UcKk3y/FS+jz0uHVvYQ 2sAaBuNdxsRQmxAziGhy+V+WlInTFF1JuqBdfmMYj1z0rC2wyw2koCL7RaVey66IIC/b9nDcmeF 8gabimC8bFecfXYshavQb09/XhQjbJWLxvayGWypArhn/3i7OyCUuPdj0DyHWDpZ4jRXsN+3qVQ GuxEzHGUQvXngWQQBnwb9qrDIs4Dy3CwmPM32EDEP0uglN3ULA6xCnneNPYII2b028ivzBi/iXG x04fmeo4Ro48NUMVypx083wJnbnRndBHquK8HhB/ZPjrbkf7lAHUPPE3gk53UK475f5p2CWvFcl t5JwN6/1wTObHTB8LvmRR0hU+SiK+AH+aFaEPcjhfVY8vmuu8kCCr2TsyqPCuC/ADVsao0aEyqj ZzEPDfe4ISwljpzOxORvzfdjQQr2KjyuFELpQfqfYMHI9+J4kQUKQ/TZpe2jP3GDTO3oZ7R94Jn ciWzfNGG3GO+JJymk+eNnH3kjw= X-Received: by 2002:a05:6000:22ca:b0:43e:a70d:7622 with SMTP id ffacd0b85a97d-4515cf11e8bmr18330423f8f.22.1778224334102; Fri, 08 May 2026 00:12:14 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.13 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:13 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 07/52] gnutls: set status for CVE-2026-1584 Date: Fri, 8 May 2026 09:11:00 +0200 Message-ID: <47f54c2b82fac1903e3e6340dc0ae154accfa72d.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:16 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236649 From: Peter Marko This is a version-less RedHat CVE. Per Debian security tracker [1] this is fixed in 3.8.12. [1] https://security-tracker.debian.org/tracker/CVE-2026-1584 Signed-off-by: Peter Marko Signed-off-by: Richard Purdie (cherry picked from commit 526972e5fa9c41a73c30eb6351bdf699784a5384) Signed-off-by: Yoann Congal --- meta/recipes-support/gnutls/gnutls_3.8.12.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-support/gnutls/gnutls_3.8.12.bb b/meta/recipes-support/gnutls/gnutls_3.8.12.bb index 72184280122..8554ab943d6 100644 --- a/meta/recipes-support/gnutls/gnutls_3.8.12.bb +++ b/meta/recipes-support/gnutls/gnutls_3.8.12.bb @@ -107,3 +107,4 @@ pkg_postinst_ontarget:${PN}-fips () { CVE_STATUS[CVE-2025-32989] = "fixed-version: fixed in version 3.8.10" CVE_STATUS[CVE-2025-32990] = "fixed-version: fixed in version 3.8.10" +CVE_STATUS[CVE-2026-1584] = "fixed-version: fixed in version 3.8.12" From patchwork Fri May 8 07:11:01 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87688 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 92DBBCD37B3 for ; Fri, 8 May 2026 07:12:18 +0000 (UTC) Received: from mail-wr1-f54.google.com (mail-wr1-f54.google.com [209.85.221.54]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.8156.1778224336861802368 for ; Fri, 08 May 2026 00:12:17 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=riB8R9/x; spf=pass (domain: smile.fr, ip: 209.85.221.54, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f54.google.com with SMTP id ffacd0b85a97d-44a14580111so1250551f8f.0 for ; Fri, 08 May 2026 00:12:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224335; x=1778829135; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=as2Kouifbb63+fwMkUqtlg6xxfEbd45CY9QHogSaXew=; b=riB8R9/x04RNpKx89qD74zbRz499hN9YuBDpyaWAUy0w8ZjUprI1wZcxnSzbQbSEA2 77E4diRUe+xrHK6MVRotbKLXgjrYkrrBy1ptZ45XZHa45nio0JraOeLRTRU9QiMm31Yo 4ibevHho8ZHoRtoQqo37TWFtsnuV/Og3naJ+8= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224335; x=1778829135; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=as2Kouifbb63+fwMkUqtlg6xxfEbd45CY9QHogSaXew=; b=TU0FhpATaxJocfyZCxBudN0lFnm1rDHl4oU0WVC1iUg8t9gBL9L4Og0e6uAU9XIVPw cuQYLvSzFe9FWl4XyIAXAZkHUsp6f4oPmg7d91CJnHtMG4Jt4K6y0muFu74ywnz57+mp mB+PTaLG5KnG8mgmFTSJLUcforNvYOgCRmmghUasLouB1//1Et1QnXQt6m4wCuQ2l/HV sPSGyMwCY8RPPU3s33ed7iIpfvOA9sRxVZv85ErBTWvpIlMtbtSmY1qdX047px3PDeYm qYF9gIXKJiu+hU7Legm9rfNThOe6sSbhkFo+IyykntPYrpwJdaLseVW4Z90n3Mw6+vzu HNbQ== X-Gm-Message-State: AOJu0Yxhsp3pjouOwgWemlNW+3ob8trWXTDjU74YsjdDSBYx+GTjw/bC JuzIfo6jge+pNn/9xT14mOZxbelO5f4qfdn6jO4ilq4pDwHoxchawNaH6TnyUh9yKlbDQ1JM6QF W1F0+vNI= X-Gm-Gg: Acq92OHGEmGGoX9tWFohvtuXAPbvKhlXwDix7kdc5ZNvcLGCAnXo3T38ziN172Jcwzw JZ4LO3Ke9OYBR7T9RN3oHfKj5znRDiJp89Mm+hFJTewfQMfNO/5wtj7Qkl7PbgJJKDc5Krr+w3Y NuQJjC3B8Km3SZYvUyvEF/bm4ZMYuG9ZpKIgaKRlA1HUhpnR5a/1v9cLZLmuW+xI6TWMVT9BNFE 8si9mWGrOAdAnjCDqUwiGabHWBERD81IRbW0UYsAURSIxTJFotKfYkVbd4XAd5Brybjz0Bexi1X Tg6H2GToTkTTy6IWxeDAdLsGAJOrHvCVwXu4oK+iDzIwTVLvutOS8VtD9yAzzml71/4Ii8LpMkM oCLO+YyvAFE0VUNa9yMZLL4JnQvnfQBarxQbT4TS+UT16PnAhOM2tqQ2eANX1BCnhsSapCHA0Hd lqzxhqtqPQKi7xBHvyYgmB8O0Ym1zJLxTylFT79MmJ4CnzYt4k2KfTevJRWdBM0Yi4fAmyWvd8P zTExAn2nJY5Znbk/eaqdeV4U5s= X-Received: by 2002:a05:6000:2c01:b0:43d:7946:baee with SMTP id ffacd0b85a97d-4515cd279f7mr16840226f8f.23.1778224334865; Fri, 08 May 2026 00:12:14 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.14 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:14 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 08/52] cve-extra-exclusions: ignore CVE-2019-2708 Date: Fri, 8 May 2026 09:11:01 +0200 Message-ID: <5896b5efe4fae359a603b6886aef3bf08aeefddf.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:18 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236650 From: Peter Marko Yet another CVE for berkeley DB, ignore as all others. Signed-off-by: Peter Marko Signed-off-by: Richard Purdie (cherry picked from commit dc2aeaf5e18a02a8381585175e7d2046a8370faa) Signed-off-by: Yoann Congal --- meta/conf/distro/include/cve-extra-exclusions.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/conf/distro/include/cve-extra-exclusions.inc b/meta/conf/distro/include/cve-extra-exclusions.inc index ffbbb7bef16..0685549e000 100644 --- a/meta/conf/distro/include/cve-extra-exclusions.inc +++ b/meta/conf/distro/include/cve-extra-exclusions.inc @@ -49,7 +49,7 @@ CVE_STATUS_DB = "CVE-2015-2583 CVE-2015-2624 CVE-2015-2626 CVE-2015-2640 CVE-201 CVE-2015-2656 CVE-2015-4754 CVE-2015-4764 CVE-2015-4774 CVE-2015-4775 CVE-2015-4776 CVE-2015-4777 \ CVE-2015-4778 CVE-2015-4779 CVE-2015-4780 CVE-2015-4781 CVE-2015-4782 CVE-2015-4783 CVE-2015-4784 \ CVE-2015-4785 CVE-2015-4786 CVE-2015-4787 CVE-2015-4788 CVE-2015-4789 CVE-2015-4790 CVE-2016-0682 \ -CVE-2016-0689 CVE-2016-0692 CVE-2016-0694 CVE-2016-3418 CVE-2020-2981" +CVE-2016-0689 CVE-2016-0692 CVE-2016-0694 CVE-2016-3418 CVE-2019-2708 CVE-2020-2981" CVE_STATUS_DB[status] = "upstream-wontfix: cpe:*:berkeley_db: Since Oracle relicensed bdb, the open source community is slowly but surely \ replacing bdb with supported and open source friendly alternatives. As a result this CVE is unlikely to ever be fixed." From patchwork Fri May 8 07:11:02 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87689 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id B153CCD37B4 for ; Fri, 8 May 2026 07:12:18 +0000 (UTC) Received: from mail-wr1-f41.google.com (mail-wr1-f41.google.com [209.85.221.41]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.8157.1778224337812069570 for ; Fri, 08 May 2026 00:12:18 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=bFgMjGVm; spf=pass (domain: smile.fr, ip: 209.85.221.41, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f41.google.com with SMTP id ffacd0b85a97d-44dd5cb0f81so1752402f8f.0 for ; Fri, 08 May 2026 00:12:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224336; x=1778829136; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=FxBQmos8KFdr980iDjnUONpCJDYp5VtFUTD6Czhtd08=; b=bFgMjGVmy1MtJB5YUlDBcw9VE4hlKRtvJCixNxfYLGncOL60DzzZZqSUK7N9g9e+pT 29yuM77t8LgTvA4H2IMuww2MPqVuuaBPc9fWEvcTTqM2CbOsAU/FN/rn8pBqT3KWyTfV 97L89eAbGlIJnJ2IkTbewTRJLSlb07BFHusII= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224336; x=1778829136; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=FxBQmos8KFdr980iDjnUONpCJDYp5VtFUTD6Czhtd08=; b=SLls69x5lzPfb3uwFoHh/XunNwheDqOTwzm4iSQ+fzC5cKxZIFfJtURt6ernhF7qvt 4HLPXQMg2p2hws+FFaMH+RFQI6az6srbIKJm1UFcjnGtSix1nKpTnpGC7Zi4ZJzki0Bp Wb+SlEaAFXtW/JpR3Y5lA177yds0WxOkvjDdpOPL/LmieK9I7djmf7DJrbBtNc93LOj6 IOPJvXK0IOtWsM37N4WQmbjkoOrNEVzIIMQl1F2sR8RHBMX5WJagZOZrwh7intxQnXRN cbtYG7+wYrUu3ogaKic2+PD1Q1FYFZXqMSBNWIB2riSyl93dk+1zAlDEbY3MZOQqjo6I Xm0g== X-Gm-Message-State: AOJu0YydDa0DfKW1PCjqJkG6brgg9bftwbQIhufi+fN3z2HaQlk8u9YC Fzu83n8oMpsbNNT0U20Y8i4tDyrhqqpEhvdg6BDrebnCRGp+cgS031vjPGR3lVPBK87wMaNjXY7 /FWhgKsc= X-Gm-Gg: Acq92OFmzSZwlcLBabQNE8CTkXrN2yVNFqMZ14YoIqfgnN8KvZlqdHrBflag2HEblgK gqYg0cwIRNcj9rW6RvVe/qHh5BsHHBqSTNwd0QZUhH2sB5kmiSYRUBOG5UEniADC0xYgVz5WoPH CNIHhzGxoHvMnWH1FhDzT+rJFNzA98Vm8oJzgqieDUjOOU8RE9zWIzSE/HlSgMUQuiQkakF4ajW 9pSOF8V2FpSIu60ZcHOtDOvkrxfPcGnYdRzj1gTjBD6knRKMAr7TaCRofsGKyLhhKoukXNF6/GT +Rvnqb3VRNWggCMbHlA3O+9XDI0gDiLUDkSqw3e0sjebit7jLoG12ovNHb+AX0eckSzOa00+/LM rCEwwNH2UoA/GxeU4AkoyC1wuQPqZUt6JAVFHhuOfS1Az+mdCe/HN/Tu0rWM47MqGHKq/NWH1yD quu8w+Y7PiMZ5snaRQ11czERNBYUiJE5eQZ4VAsJ343IeF9A2w1qGIHkQ/cdvWWG32ycQB++Ll9 QVuNQpCTRFm8NhNheq1KxnBIsg= X-Received: by 2002:a5d:568b:0:b0:44f:69f4:39b5 with SMTP id ffacd0b85a97d-452ea742f47mr6810127f8f.29.1778224335580; Fri, 08 May 2026 00:12:15 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.15 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:15 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 09/52] bind: set status for CVE-2017-3139 Date: Fri, 8 May 2026 09:11:02 +0200 Message-ID: <6217ad12ccd6d24d5d00722c3339bc5b42763461.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:18 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236651 From: Peter Marko NVD [1] has only redhat cpes. Debian [2] says RHEL6 specific. cvelistV5 [3] has unparseable (so assumes affected): "version": "shipped in Red Hat Enterprise Linux 6" [1] https://nvd.nist.gov/vuln/detail/CVE-2017-3139 [2] https://security-tracker.debian.org/tracker/CVE-2017-3139 [3] https://github.com/CVEProject/cvelistV5/blob/main/cves/2017/3xxx/CVE-2017-3139.json Signed-off-by: Peter Marko Signed-off-by: Richard Purdie (cherry picked from commit 1e416859782de4f09ce01f273616a4835fd226bd) Signed-off-by: Yoann Congal --- meta/recipes-connectivity/bind/bind_9.20.22.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-connectivity/bind/bind_9.20.22.bb b/meta/recipes-connectivity/bind/bind_9.20.22.bb index c459cf28c9f..318412a62c0 100644 --- a/meta/recipes-connectivity/bind/bind_9.20.22.bb +++ b/meta/recipes-connectivity/bind/bind_9.20.22.bb @@ -108,3 +108,5 @@ FILES_SOLIBSDEV = "${libdir}/*[!0-9].so ${libdir}/libbind9.so" FILES:${PN}-libs = "${libdir}/named/*.so* ${libdir}/*-${PV}.so" DEV_PKG_DEPENDENCY = "" + +CVE_STATUS[CVE-2017-3139] = "not-applicable-platform: RedHat specific issue" From patchwork Fri May 8 07:11:03 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87693 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id B8466CD37AC for ; Fri, 8 May 2026 07:12:28 +0000 (UTC) Received: from mail-wr1-f47.google.com (mail-wr1-f47.google.com [209.85.221.47]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.8226.1778224338437245595 for ; Fri, 08 May 2026 00:12:18 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=ezFZIzYa; spf=pass (domain: smile.fr, ip: 209.85.221.47, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f47.google.com with SMTP id ffacd0b85a97d-453903ee4adso1138998f8f.3 for ; Fri, 08 May 2026 00:12:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224336; x=1778829136; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=o5ASaPIXRr10dHnkZMBihIYjDbKYzCCGOLrsTa93qV4=; b=ezFZIzYaZlXW0/zzwDxa+qVk+i84tOdTiEB0wuhV9uqlNFSbaOiz78jZYsK89yf0D7 AJE2W4L2z7su0IvD0kqa4/Bz4ervMNAcLvLcBHR7DIBRdNWTKRxjHCs2JcV7IbTtMUHA /Y0/KasOTFCNjhFoLzYx9Y8hVCY9r6UnDznko= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224336; x=1778829136; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=o5ASaPIXRr10dHnkZMBihIYjDbKYzCCGOLrsTa93qV4=; b=X+tVX46U2b/nKoRrLr0CS/ZAn8FUZouHKhRksSY8h1BQx3MT4pSE+M2tp+dmpf0NdQ ygIJBcXzipSRGlSUntOSLiNImG1D0nVoefAXnggzW0WAXGWoD7QLyFruwtVVj33d9yNY n4Bbtnvol6tf0+xz7ffvb8jziret1RuQ5dWZuHXmj/J2x1NPOdm/r8rAogzvG+yv/9Aq gSNFK+WuZs0xMhHexOYZ86QQo6h2WcHsJzbj2Hm9NUSbxdt6HXW9S+Ar+9Zx5yWTw6F+ W9p/PZ+WfeoWmS9PBFzCsb4l8VmUgnwZWVLWsC+LqKVCMMaj5pANZrBCvH/Hxc/71QnS AfWg== X-Gm-Message-State: AOJu0Yz5YIQ/8HuvDYwA5qf4mFuRTBR/EA6Cbd6IxpJH9EVGrnb3vPx2 oTWouJhd+NToqSoEBysw2EMFFOL3axUIDUiLHvPpzG1QZNB7aVdeTqF+DSZLHbKS5bXvBxzmspc 2MMuVznY= X-Gm-Gg: Acq92OGSofIx1bcyPhaWpFb49AlwjBSWQbxaBrm4woBo9FR6sNefoKZAMV27VqqJiEl 97BD+OMNFk8KICgkJTd1HfJPXvuNFWvnnADPNR2gun+SeiyLA9DkslVT9MHkWDZMoFKlDBfo4l6 pjyFoMJM1y82kHN52JxT97YBMfD1bBvL0TbK2sMi+gs/nEl2TdJhxZk1iPE8Y28FaaRCgCcbQXT jh8kmbqifflcwglGydGgded52TkN0J5fjvw7PKxAj0/CIDIqUSKySo+1DnIZojUZ01iXoQfC6pS IzMmHRjcN0NVXDbv3QpYn3cbeQKjzUFTLNoRMoS7DWevp6DLKTBZhyEfbclXJ95LEaOHS3ewQxo hjXaXb9Jzdzdtx4YD43CGoAxIM8uj4WGo6RnlwuRo//3QH+ha7WDElbk1JnKqHHSVzJKjEkHNwh xxkQlISyzxpgqvUnggl8hguucdVjG6ESFmL48pgw7smRwO6hi4hnDxjA1RKl9bWopmTp1eD3Rfp 4fshURCAltd4BMdAC5Rp4SJsUc= X-Received: by 2002:a5d:64e9:0:b0:445:eb07:f0bf with SMTP id ffacd0b85a97d-4515b524398mr17670348f8f.16.1778224336420; Fri, 08 May 2026 00:12:16 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.15 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:15 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 10/52] base-files: set status for CVE-2018-6557 Date: Fri, 8 May 2026 09:11:03 +0200 Message-ID: <4441dbaac52c8294fca13c9fcf589a9bbe1b6692.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:28 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236652 From: Peter Marko CPE in NVD [1] shows ubuntu. Debian [1] says "Ubuntu specific motd update code". cvelistV5 has unparseable CPE so it sbom-cve-check assumes vulnerable ("lessThan": "10.1ubuntu2.2"). Signed-off-by: Peter Marko Signed-off-by: Richard Purdie (cherry picked from commit 24d38fe4da4ea7d110877c5aaf419af1d27dd43b) Signed-off-by: Yoann Congal --- meta/recipes-core/base-files/base-files_3.0.14.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-core/base-files/base-files_3.0.14.bb b/meta/recipes-core/base-files/base-files_3.0.14.bb index 3f01bb35d92..d4d777b4851 100644 --- a/meta/recipes-core/base-files/base-files_3.0.14.bb +++ b/meta/recipes-core/base-files/base-files_3.0.14.bb @@ -167,3 +167,5 @@ CONFFILES:${PN} = "${sysconfdir}/fstab ${@['', '${sysconfdir}/hostname ${sysconf CONFFILES:${PN} += "${sysconfdir}/motd ${sysconfdir}/nsswitch.conf ${sysconfdir}/profile" INSANE_SKIP:${PN} += "empty-dirs" + +CVE_STATUS[CVE-2018-6557] = "not-applicable-platform: Ubuntu specific motd update code" From patchwork Fri May 8 07:11:04 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87701 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 61994CD37B5 for ; Fri, 8 May 2026 07:12:29 +0000 (UTC) Received: from mail-wm1-f46.google.com (mail-wm1-f46.google.com [209.85.128.46]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.8228.1778224338975706890 for ; Fri, 08 May 2026 00:12:19 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=Jbq61QaG; spf=pass (domain: smile.fr, ip: 209.85.128.46, mailfrom: yoann.congal@smile.fr) Received: by mail-wm1-f46.google.com with SMTP id 5b1f17b1804b1-4891b0786beso11459495e9.1 for ; Fri, 08 May 2026 00:12:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224337; x=1778829137; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=a6CQ1E1+zpR80zJgccpyIiigfSWNE4vA+IIkU0nDwjQ=; b=Jbq61QaGD2lB4gCZ03LTW0AUBEiqpxY7iMaDvA4AWdniy9PERfqYJwsL3TulX7PZJc KHRHIwvoqCXtK6L+SgtqR/X2jImkuqHv/7QB7gNcjK2W9JuuFnqag4IwopSGC7hLn8J+ GzPoIB/v4ZPiSo6dgdtoCwD2a9cB5c9A5iEzg= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224337; x=1778829137; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=a6CQ1E1+zpR80zJgccpyIiigfSWNE4vA+IIkU0nDwjQ=; b=DKtGd9FMT4shxA26fomrKnlLlm0/e0KcylMoc94OjE+jReXENGp4cTFmfAaXBY7T0P pBpPOwzHTNAvuHpzJdNZUFd9j4NWqW4JM6RYAjDk7lAUfn5JscfUYjHJu698sFNt37fX 3ghQBEbPVAgTw1jdAMMKZI4jL69IJ0Yc7XKuuGOEnFNGNn7Y+avzrpaTYRWxqYTT1I93 R5yFIsfnj6cCQkMKeASKtNy66WRmi6D1qnZ1yFuyakEZhCOv0H5sKI9wR9Dcya+ewZOP XQsfAS1ljSxAqKATxp00FAnRLdy1LZyT57K8tw9P94VrTjq9EH8GZgqEkRRwyO0MayE1 YHYg== X-Gm-Message-State: AOJu0YzDqbNjMfem+BSP2o+lCZXUTU2Eg4X7cjhfxlHVrfcuIWVYvOXb 0Plaxwa1oZDpT6CZYf91OE+SF/SkrbWgiEcPTT5PKOlGPFeRuj356ii5hpLdJwK+Bx78lOn8Zfs YhcKS818= X-Gm-Gg: AeBDietHBPSC4hBawZj9F80sZJ/STP13GJBWbaAOosiUgsFsXSrGLZ0n8cX9/A7IAMV jwe9XalB+VM1FqIEoRSR+Ir4PaKK7iEwMXc3Nc38SUKMZq2+ePSU4x1eUoc7pdANEREdKz/+ivD BokNwoQwhgMhklKv5FP5xK//uzPnEMkqLhBGdpFXcua4xedH56F9nVgGqTG1i07txYr2psmPFOV cLj964cPEz+dMDQAeh4RrF5f2KR5k91K3xaEWWnQF2AE15vtJnLxMXOwwkn9KXvyz3S+ZdtcNtC yZrMCrSsLafjBlG+COd81/R5oiUD/Eps48VOIPmyyDPoVzOoODy1C5eUHLHSzw3O42dJC8ki9W/ 5JrqLwZ7sSxSkEGRo0X0vaZMQ7L6nUuGQ4UyGuE8FLwBxdI0sewZL0siAkV/aToPtocURlbLgZ4 o0Ww7n7V6c7HkL4aj+FjjApB72wYA++Gtn4UtGZmj5AeslJev07g2TVErXj+qtPSXnjlTGOisGe oaJ3HakQCPcjmB0BEI+jLpTqkk= X-Received: by 2002:a05:600d:849c:20b0:488:a2ac:a34c with SMTP id 5b1f17b1804b1-48e51f220e7mr133668535e9.12.1778224337030; Fri, 08 May 2026 00:12:17 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.16 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:16 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 11/52] rsync: set status for CVE-2024-12084 Date: Fri, 8 May 2026 09:11:04 +0200 Message-ID: <7b9dd2b6c0890ae6f415244c005403d15a84367b.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:29 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236653 From: Peter Marko Debian security tracker [1] says it's fixed in v3.4.0. NVD [2] does not say that our version is vulnerable. The CVE is reported probably because cvelistV5 has many CPE groups and some of them are unparseable (so assumes vulnerable). [1] https://security-tracker.debian.org/tracker/CVE-2024-12084 [2] https://nvd.nist.gov/vuln/detail/CVE-2024-12084 Signed-off-by: Peter Marko Signed-off-by: Richard Purdie (cherry picked from commit d0edbcf24295d5ef8682488e2512561d1246efa4) Signed-off-by: Yoann Congal --- meta/recipes-devtools/rsync/rsync_3.4.1.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-devtools/rsync/rsync_3.4.1.bb b/meta/recipes-devtools/rsync/rsync_3.4.1.bb index 697cdee829c..509be486b87 100644 --- a/meta/recipes-devtools/rsync/rsync_3.4.1.bb +++ b/meta/recipes-devtools/rsync/rsync_3.4.1.bb @@ -64,3 +64,5 @@ do_install:append() { } BBCLASSEXTEND = "native nativesdk" + +CVE_STATUS[CVE-2024-12084] = "fixed-version: fixed since v3.4.0" From patchwork Fri May 8 07:11:05 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87699 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 4B005CD37B6 for ; Fri, 8 May 2026 07:12:29 +0000 (UTC) Received: from mail-wm1-f41.google.com (mail-wm1-f41.google.com [209.85.128.41]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.8159.1778224339611942826 for ; Fri, 08 May 2026 00:12:19 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=cx7q9kqz; spf=pass (domain: smile.fr, ip: 209.85.128.41, mailfrom: yoann.congal@smile.fr) Received: by mail-wm1-f41.google.com with SMTP id 5b1f17b1804b1-488b150559bso12670125e9.1 for ; Fri, 08 May 2026 00:12:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224338; x=1778829138; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=u/kHa/Mi5DBZ1pp+SAt+xhR2nMDD0M0OqaNRWTgfYdE=; b=cx7q9kqzHZ2ve2pr1gc9KI0L5eopQfH1CneazgqYhM+ZCp6qcKcm6mTOhAFdrf5SMZ O03vbKQ3H3Y3zIgRZp4VHyHFLq3h4pVa1lgVvqKNmqeaS50QYHB2nk1O2bTNy+eqviJ7 hsCnm6ST4yaWva0EYzoU7qKpauGTDr+hj1SMw= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224338; x=1778829138; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=u/kHa/Mi5DBZ1pp+SAt+xhR2nMDD0M0OqaNRWTgfYdE=; b=J+8a9RqwntamvzqrlOXtxZ14C2hu0eiaOCq8urgCfc+AnyCPADiyq/FAlvBlPY4GlM fZ7RBoAhy1dMSFMClKVzuRRE5ddvX2uEiv6gLcu1lIqelQZHaQY3ElYkRwJ3sZSwLkuw moDIT3DspslG6+/ebgufzl/TSbK1NrScwhU9DryDbljBnKEPGne8bmaP3z2GujwZ6RC4 m0ftKnq1dTBLylpYJQMexK/sVJy720Jdhejvk0zKkflSyCUgl4IetZ+PHXV0JuYL5mao acLlG3PUHDcqeunv64YL9MXxiuU7/AeVaJLe9xhgwTp7JJk3s9VHEc/udGbbMyM93Djk Podg== X-Gm-Message-State: AOJu0YykwUsrQBq7vE85e3g9VfhfMOcpqE+LsPKgdgW37A/PKgke01Po GJxhgd6iVlpahkRwElBkC1+fsl0AULXY44QroxlMhBY5psmbbzxq/KqKw9pvvs/GMaQEvlstbI4 UrkTxUMI= X-Gm-Gg: AeBDieulensuuhwFztqQ047DJRedfhkrqjexMN1NBe/THSES55lIBtgXBOi3Ata0dEp K+nUN2C76zae1Jd6vBP4byALnmrS94rY3ZggaybIN/e1ownp9LcezJuHUy7KLoi9hBXjGaksDoN Ku4jNXu11OnhSjZIEKZuKBziV0zgV1F3v3WgfCtTXE0YEB2QvR1Uflb/tm61GKqkYuuzlI7LosO gumcJ444J8yD7OXXQs7VuR/hK86L2rzxCCGmpPI+d/cKJTQZAMijqsaBH45DdL2w9m+0+ODlRFX s5+Wfz9rzdN3/3DJ9v7MX+b9L4xJWMj8aTVQNtdIz5OXKb9KhGC5uwnIYwCJId03TZFMcRrIalV ocw7YR9H81J50OxVg3AIO8GE8A6rFe6+MoaUd1KZYtM1oVmO7uLZUbN2MiIIRgARQ8EKAKb6dkK +bA0eg87sXZT3n7cmBaZ3aWu3tkggaGnhiNb0WOysWPLXFC03rpW3MCWc0e4GqkkDMGH236HHOW JuHO4D8jKUQED3k0mJfeYan6BM= X-Received: by 2002:a05:600c:a110:b0:48a:5c23:cab with SMTP id 5b1f17b1804b1-48e51f3c363mr139109625e9.19.1778224337642; Fri, 08 May 2026 00:12:17 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.17 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:17 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 12/52] python3-requests: set status for CVE-2024-35195 Date: Fri, 8 May 2026 09:11:05 +0200 Message-ID: <8e6c1d6aa752e5064b7ea8e3818ddcf52a735458.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:29 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236654 From: Peter Marko NVD [1] does not have CPE set. Debian [2] shows comit from v2.32.0 as fix. cvelistV5 [3] also says "< 2.32.0", posibly "defaultStatus": "unknown" is causing it to appear in CVE metrics... [1] https://nvd.nist.gov/vuln/detail/CVE-2024-35195 [2] https://security-tracker.debian.org/tracker/CVE-2024-35195 [3] https://github.com/CVEProject/cvelistV5/blob/main/cves/2024/35xxx/CVE-2024-35195.json Signed-off-by: Peter Marko Signed-off-by: Richard Purdie (cherry picked from commit 7cef5ee0b5ce16c7dfbb836c95f41a0b7c5a82eb) Signed-off-by: Yoann Congal --- meta/recipes-devtools/python/python3-requests_2.32.5.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-devtools/python/python3-requests_2.32.5.bb b/meta/recipes-devtools/python/python3-requests_2.32.5.bb index 0eb9765b633..afcf1a99b36 100644 --- a/meta/recipes-devtools/python/python3-requests_2.32.5.bb +++ b/meta/recipes-devtools/python/python3-requests_2.32.5.bb @@ -32,3 +32,5 @@ FILES:${PN}:append:class-nativesdk = " ${SDKPATHNATIVE}/environment-setup.d/pyth CVE_PRODUCT = "requests" BBCLASSEXTEND = "native nativesdk" + +CVE_STATUS[CVE-2024-35195] = "fixed-version: fixed since 2.32.0" From patchwork Fri May 8 07:11:06 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87700 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 339F8CD37B4 for ; Fri, 8 May 2026 07:12:29 +0000 (UTC) Received: from mail-wm1-f45.google.com (mail-wm1-f45.google.com [209.85.128.45]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.8160.1778224340749550136 for ; Fri, 08 May 2026 00:12:21 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=E6PgRxbZ; spf=pass (domain: smile.fr, ip: 209.85.128.45, mailfrom: yoann.congal@smile.fr) Received: by mail-wm1-f45.google.com with SMTP id 5b1f17b1804b1-48334ee0aeaso12172195e9.1 for ; Fri, 08 May 2026 00:12:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224339; x=1778829139; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=XYRKdPc8QWrFSOpN/WHFyT2QXFt7tGH3YFmCNqJ6zzg=; b=E6PgRxbZXQHbKfzhwU+ysNa7qXxLD7bPJuYhsBtqbvqea0rNNb1VO8WEuNtfKwptjB 4eo3jOL/BbojG71kHmsLFFHYVVv5ZmI1GzHguZf2lO8N8o35wZHeqWpAr7RMhTfpdOvG IcyBs5y0sbNPFg+zUhp5hyIp2mBxI77ODdW5U= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224339; x=1778829139; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=XYRKdPc8QWrFSOpN/WHFyT2QXFt7tGH3YFmCNqJ6zzg=; b=jY9IL6iJMaikcL2TpbLuR4W2FKo9WGIcGU/om44b7vAziKiCD/CzmzBprPcCW3cUBW iwYdglwerlby02sJiZGBaHWVcQW8DmYieVVsz1WDAG5T2xb6zPyTzG5fWQGCXu3df3CD mqi7DZJ/A/TwyrhV6n1ugWnktdQ9t3Ax8gO5fw7v6MuRz2GbbzYzymlMwBZ3d+ExWMar mIYADRGmYrKKv9wyTRKIJVEVws4iIhpZv82eEzU5YQ7PC/ypQwGi7t+xdE2FTKC8FPpt vVTfFhSaqM6GlQd/Z20omwCLvLDvRlTedQFcC1vqQAIt6oOjD5QQRYMQ7CkfwEy34bBt aNfw== X-Gm-Message-State: AOJu0YwTyDVk1GAmi0/rkfcYbfSJ5A9NS/Hn0yNwGoh9k4h/pkUKbiF6 /+BOL2SORxwWBCqUw5xhLHA8KOqLLH2SWDnvukOljhfr/vGTrSiimXXy6GHuR4VPJMtkxBNt3Dc GY2qbXeI= X-Gm-Gg: AeBDievMs7QH/60fxlaMuh9kHJivl3pacSmpvUzwX9i8OWXPYvKHZOsZDyXrDPw/mJ2 FmtVmdjLV5nuk11NdypviBzeP92o7OjBlf4KleuGhropoEzNKRp3vZtCOSsjZ17faS+iGzupj7j U/FyWRPYZpj9IWPilnr6lQWrABqHgGLHVSomvWXSyc9OB6DW1KevQNSePYhwVc3UK/GH/+CN95I m/dadIHKfmuC+hM9zaBpLjb7mNpKuPxgQhu0nmNHZJq3CKU6ipnTC7BdKmg1sDajYKSLuTn0FGw vKXqe/6oTvtVvr3lSbspmk0woILjvGotyOC/p6zCIb+UFFds2b7mPKy8DrXc77hPmhT6eHYVdJV jGVgsVe9gRGG0G2S4ChsbswgNKuXfMiYLZtCWV7LVdatBL1mC4G0lQNZG9H+EiGRFgwnkgJo/dN BsdGOjj/x+ZG65W5bSzsY9ilHL0JkSymqBhRtgI0UIiViZkYUWhl2jD9BFLEURdDrLxrJD03YJk JgVhQ7D4AGF2C7VBI3wbzkiyW8= X-Received: by 2002:a05:600c:4617:b0:48a:5970:1fe1 with SMTP id 5b1f17b1804b1-48e51e0bb17mr100337145e9.4.1778224338697; Fri, 08 May 2026 00:12:18 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.17 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:17 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 13/52] python3-requests: set status for CVE-2024-47081 Date: Fri, 8 May 2026 09:11:06 +0200 Message-ID: X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:29 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236655 From: Peter Marko NVD [1] does not have CPE set. Debian [2] shows comit from v2.32.4 as fix. cvelistV5 [3] also says "< 2.32.4" however for cpe psf:requests. Not sure why this is shown in CVE metrics. [1] https://nvd.nist.gov/vuln/detail/CVE-2024-47081 [2] https://security-tracker.debian.org/tracker/CVE-2024-47081 [3] https://github.com/CVEProject/cvelistV5/blob/main/cves/2024/47xxx/CVE-2024-47081.json Signed-off-by: Peter Marko Signed-off-by: Richard Purdie (cherry picked from commit 19ffb4d9d759ff100f92f20770f3b68eecc289a7) Signed-off-by: Yoann Congal --- meta/recipes-devtools/python/python3-requests_2.32.5.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-devtools/python/python3-requests_2.32.5.bb b/meta/recipes-devtools/python/python3-requests_2.32.5.bb index afcf1a99b36..3477a5d83e9 100644 --- a/meta/recipes-devtools/python/python3-requests_2.32.5.bb +++ b/meta/recipes-devtools/python/python3-requests_2.32.5.bb @@ -34,3 +34,4 @@ CVE_PRODUCT = "requests" BBCLASSEXTEND = "native nativesdk" CVE_STATUS[CVE-2024-35195] = "fixed-version: fixed since 2.32.0" +CVE_STATUS[CVE-2024-47081] = "fixed-version: fixed since 2.32.4" From patchwork Fri May 8 07:11:07 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87698 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 21E82CD37B2 for ; Fri, 8 May 2026 07:12:29 +0000 (UTC) Received: from mail-wr1-f45.google.com (mail-wr1-f45.google.com [209.85.221.45]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.8231.1778224341302204890 for ; Fri, 08 May 2026 00:12:21 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=QA1AKnsw; spf=pass (domain: smile.fr, ip: 209.85.221.45, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f45.google.com with SMTP id ffacd0b85a97d-44c4cc7c1cfso1342517f8f.0 for ; Fri, 08 May 2026 00:12:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224339; x=1778829139; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=uUpVITxsVx+yFU9OHe9YXS/dXKWyqjIcXCOipi64QVs=; b=QA1AKnswVbkSFtG81slSo7qsOruoW4y1KP0WDXK/GhP7y9Qoa84N4g7WGtdOiRRXDW ZQ5GBXDgdfnfHGRFZKFpixo/jcd34ETM9XbH4sFeg0lVQp+cS7ebi9FMoRF0XYXfBqZo 49JZkE0wVoqTJrTO76B9LFWYxlvxldwk5V+8A= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224339; x=1778829139; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=uUpVITxsVx+yFU9OHe9YXS/dXKWyqjIcXCOipi64QVs=; b=nFtDLHnJrE+fD1HwwuPo5ni21l7rqg4ur+vXCCOZ5tVRer0vgBAfeRVVr/rybN1b7/ mv4zPCj0tVrhcWLsauSnoIePd2PeeyzsWlbggiHWE1ULYorNOxHA/A1u2hEpohPUmRl3 dS+NFU0i/ePbObHcMj+LaggKi2pKGsOuB+0HdFa7QIozqt0Er4jGvdxWLj2cOYc+xrWn ioiZ507Kpv/n1Vpf3BMUfQsEzbKw0sex3V14H++w8ynR2HpXZJU6m5StEZ6yIBzGwe/G VK7XUh0TNs+tCgyBUyic2/5dQyRRJn7PjZwP5yKvB7V3bf4Xy2SAXcrcbXGLBnW8Apq6 9wcg== X-Gm-Message-State: AOJu0Yyq+xbrv62ps18bVRc2xYXtqWhd3lIY0SFIM29vgfQa94ZbA7rk gRPl+6s/gO85LeNb7zmvKpdEgtBvvIRRvD4psUKlE5D6xkpR/ZajSVBOStgTltcqLW5DLJYjL0n mg5GzZW0= X-Gm-Gg: Acq92OGhA09LRIkH4Su+6w8VuAskAKz1OBZ9F30fahOur17LuMbcc793qz5fKJSQK1N 4vSulC8ms7oNoTk0gZXM7gd0r+/i5SzygIy4N/TeAiSDs7HDKJ1/4BIgkVdsPWxYLDv4Q3PW1Jb Ss18StxJnwacQpiBXMVpmmNRhfMi1SEtWVp7MvYncYVcvH4ZA2C3E2q0ybnPovgswxbnuDBdyf4 0UX+7mCbiM85Q98qQwrfStdP28a7h/5ljnfTnH4JQAt9DbNGNiifpX/tJsD2/MoQFMLh4GcNBOu X3RDt8cl79wnZsLheC1T/aKRUQWGNHFI8HUqUaB4ngmy6oTnkaDlfgB/0bOHFVyAh1KNgYuDHuE Rmm2XXgIwDx6JQnkWPTOVZ7z16loMRSQd17N583yr7ucx+pZqe4nGvIyw2Y+H5G/QPBXL+52tuN OFJiZL6k/lhn6uRwIK1xC6qjD8BWSExh+wGtRmdZqMHnzu20Az58DukRbDW4paQpxq6rRrme5Th ZU38Qr/+s14pX//FIHtCFGyJvo= X-Received: by 2002:a05:6000:26c9:b0:44b:d88e:7ceb with SMTP id ffacd0b85a97d-4515d3dc4e0mr17980405f8f.32.1778224339392; Fri, 08 May 2026 00:12:19 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.18 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:18 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 14/52] git: set status of 5 CVEs Date: Fri, 8 May 2026 09:11:07 +0200 Message-ID: <2b29078c8794250118b5b30576baa74f69ec77ad.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:29 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236656 From: Peter Marko It is unclear why entries in cvelistV5 cause these CVEs to appear in CVE reports. There is one which should also not be shown per listed CPEs, however it does not have a patch, so it's not added to the list - CVE-2024-52005. The others are set to fixed with version based on which .0 release included patch mentioned in Debian security tracker for respective CVE. Signed-off-by: Peter Marko Signed-off-by: Richard Purdie (cherry picked from commit 139e4e6f17da181eee029c81ea17b847e9cc559e) Signed-off-by: Yoann Congal --- meta/recipes-devtools/git/git_2.53.0.bb | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/meta/recipes-devtools/git/git_2.53.0.bb b/meta/recipes-devtools/git/git_2.53.0.bb index 5fe1767e285..8d71905f419 100644 --- a/meta/recipes-devtools/git/git_2.53.0.bb +++ b/meta/recipes-devtools/git/git_2.53.0.bb @@ -171,3 +171,9 @@ EXTRA_OECONF += "ac_cv_snprintf_returns_bogus=no \ EXTRA_OEMAKE += "NO_GETTEXT=1" SRC_URI[tarball.sha256sum] = "429dc0f5fe5f14109930cdbbb588c5d6ef5b8528910f0d738040744bebdc6275" + +CVE_STATUS[CVE-2024-32002] = "fixed-version: fixed since v2.46.0" +CVE_STATUS[CVE-2024-50349] = "fixed-version: fixed since v2.49.0" +CVE_STATUS[CVE-2024-52006] = "fixed-version: fixed since v2.49.0" +CVE_STATUS[CVE-2025-48385] = "fixed-version: fixed since v2.51.0" +CVE_STATUS[CVE-2025-48386] = "fixed-version: fixed since v2.51.0" From patchwork Fri May 8 07:11:08 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87697 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 16AECCD37B3 for ; Fri, 8 May 2026 07:12:29 +0000 (UTC) Received: from mail-wr1-f54.google.com (mail-wr1-f54.google.com [209.85.221.54]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.8161.1778224342491059571 for ; Fri, 08 May 2026 00:12:22 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=xZBbwgV6; spf=pass (domain: smile.fr, ip: 209.85.221.54, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f54.google.com with SMTP id ffacd0b85a97d-448528f4e69so1069695f8f.3 for ; Fri, 08 May 2026 00:12:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224341; x=1778829141; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=OgZ00ChyLAYVM66AY0+ucW2IVTbROHRxghqXDls18Yg=; b=xZBbwgV6/af8y3xmz3eXw7UN0u8h3S4yYUG6Y0tNMpoazRxALNS+df4Kf7HnIUcu3I 6Kt1up/2Zs44+moDDBoZuF3C5PzInjq0VYjzp58YfAhoEOpzRYa278rK3BBTnj0TC1yC meSz50nCcDwHL/s6sMu/x9BpUhKChFh4i7igo= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224341; x=1778829141; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=OgZ00ChyLAYVM66AY0+ucW2IVTbROHRxghqXDls18Yg=; b=NBSV5R3JqpCeu+KdQSHrMY4PQ/m1gSEsNz/KCLMKtmIO1nDqO0U1HK44NqcxL/sOaR gvzLscKJroI5LHxJfwL8JhEu6RXtPnSKWvDcVyv5NpbpyyXra++4B821MnNa9aBhUe6R +2dkW4TiMfH+MyGmMIdFjx+xp9e8RuB16F7ULM9NSTBECqa1z7dsEn8QOuGi3UmFxCyT hj/vX0EbsHo972sYLdMuPj1aftoNSN21Nh2oexljReEEM22bYFMa8RzfWfeJ9nhVB2M7 RA48Hh0QkndMZdJrD6FYmglPmOJ/PFvmU488ttS6VoHuwG8fwSEjsiMZzsHoCEaABVoO fxPw== X-Gm-Message-State: AOJu0Yz74UloOgUh61KhAifncKBteOuxWEx5N1w/LopRnL5n19LTZwcb 81R/nSGpq6BKkqfwqn9iadWZlf6vQsJ7+Ny9cBR45UTadTHJ60aInpgjVM2Uw8k5rQeI4M0RDhd 7L2t+OgM= X-Gm-Gg: Acq92OHbskb1zi6BoTS2sdPyIL83bHXuyVM5J80yYkTUrsmboKGCZ7qlG/1OP1qBng0 B8hFuyYtO8pkxCWyiG79ffuLju4f2ZaFq6jTWZpIgMkQ3SczYweQp+baHR1WKSb5wIpWbkV+NRZ iyS1LA01t01hyJSiL/pYpYUzrmxfYoLgezINfZdxRQDzr/p/ykI16g+Hvd2b+KnccFV1Ng6eCZC c6cC91PVbwYd93mP7n9oz4b0EP39ShH6OPL1yczPvESctgNjvYxAHz59ueFkxHrnrMsX6Q/Emte LU4Y4mKc+3+yjv8MYoUEqXRReGtiHNgKgCtZPUjbyzX/vp9UXuryhE2V7NgrqLsJEUuR/wdwHIn X+ceBCtKUXxHxdNtvgPtEDiGNlQYBLoGjP3IOjeLDe2kJibEzr/aX/IyKaYfmusXLgCO4pi/I9y qFrpEvcY0hULGc3Vo8jickpe9MQjnnwXv38QCOiz6YYez/fUChndzooDdXvjBbSa8hNEw+Tq4ev hZQ+E+SgMbwgsDw2uGydQupDc4= X-Received: by 2002:a05:6000:2dc2:b0:43e:b0b0:629a with SMTP id ffacd0b85a97d-454636cd6ccmr2111461f8f.34.1778224340585; Fri, 08 May 2026 00:12:20 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.19 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:19 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 15/52] cargo: set status of CVE-2023-40030 Date: Fri, 8 May 2026 09:11:08 +0200 Message-ID: <392b88f7d93230194a7b4749de4c2f62e01e1069.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:29 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236657 From: Peter Marko sbom-cve-check has problem matching version 1.72. It works only if cvelistV5 is modified to indicate 1.72.0. Signed-off-by: Peter Marko Signed-off-by: Richard Purdie (cherry picked from commit ac18fd10e777b4ef688b7075c47c616e9405d752) Signed-off-by: Yoann Congal --- meta/recipes-devtools/rust/cargo_1.94.1.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-devtools/rust/cargo_1.94.1.bb b/meta/recipes-devtools/rust/cargo_1.94.1.bb index fc41a19a257..36ec3461135 100644 --- a/meta/recipes-devtools/rust/cargo_1.94.1.bb +++ b/meta/recipes-devtools/rust/cargo_1.94.1.bb @@ -83,3 +83,5 @@ RUSTLIB:append:class-nativesdk = " -L ${STAGING_DIR_HOST}/${SDKPATHNATIVE}/usr/l RUSTLIB_DEP:class-nativesdk = "" BBCLASSEXTEND = "native nativesdk" + +CVE_STATUS[CVE-2023-40030] = "fixed-version: fixed since 1.72" From patchwork Fri May 8 07:11:09 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87695 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 063B9CD37B1 for ; Fri, 8 May 2026 07:12:29 +0000 (UTC) Received: from mail-wr1-f45.google.com (mail-wr1-f45.google.com [209.85.221.45]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.8163.1778224343666869526 for ; Fri, 08 May 2026 00:12:23 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=b5IYiOkN; spf=pass (domain: smile.fr, ip: 209.85.221.45, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f45.google.com with SMTP id ffacd0b85a97d-43d76dd4ee8so1462408f8f.2 for ; Fri, 08 May 2026 00:12:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224342; x=1778829142; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=DuEV+8iSZSk45TKEfXjhdt8zShUz7in945gYyXVOeaw=; b=b5IYiOkN2iTAtYY2UET+c/ycXbBKbSwYFlqlwIxyTXrpdbFDv1W2/N4MaLhoBO+8Xh i3vK8OxbH7sN6Jzb0ELRQHJA1Hgbjfe8nsSsBEav5AsSoTou6uoP+RZqSk2ILXqDvF70 fs10Lxfv/o8lUkqw9LafxATOee0k8iyF14PvM= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224342; x=1778829142; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=DuEV+8iSZSk45TKEfXjhdt8zShUz7in945gYyXVOeaw=; b=eAwpb8qY6lx0oeRLI/andVPtU7okgEcGJ5QVa08memqhrqB+OvjkrRGQ//c+dAyJbK gUh/8tpegPygjxK1SY9v3fs059L1wE4bGgsmApyFCyIqkE7kRPd/vpscRK1kWZo0eyvw vyxP8JgSVoZkQUJVB3wPcJ6islDmRtl6/R97cHDDWqsWS+irhJmR217j1co5Eqgk7XD4 XcxqWDLuwg9PdBR2cRJadCHrJ5ymEzXOOzmkCiqKZ5soumGu7CZj28Gp6Q9DQQhql2dI b9GuxImz60b968BGa/f73vJLJQqn1Fjat7JY6qYjLYDxBJb0UK1IDH/i7nDWAvyYrmB3 gQRw== X-Gm-Message-State: AOJu0Yxc/CUs6u2Bhb1KkwpH2oa8RDJZko9fJg14ObcXpKQN0TOotmpe ehmRc0Cz1FvIhciEz4N8fxMvuhi124fY4vzL5o5eMMf/CD6XX3QzxLjdH0ETYHzaPLXkXoyOc9v 0IY13d4k= X-Gm-Gg: Acq92OHhg+CMUhZKaxnxNaiuu2A8iADikF2/zUkPGuaFODtXDKlQRpa5OaDGulUlHSO S/ZnQMBURDh/YNvhxSqRtRn9pqrd1Ac9syAGpcv0Tx0nGjxJfDPijScfHzPu6AZz9uQieiFqCKP ytOWheiiW+SJ10s0HGlOzZ4OOhJQa8fbuPaB3kfd3RBDg0hlwmALfAjDAMWHT+1wRl+GQAsY5GE tkksjK3vw56qhklaXF0kkGq9hULF51jcJ5v5Qnk9Vhbg45r6t0Fa5dwCRK5RJl+cEZ1btoPYaue xMYVeTnjCmpqGHPq6zhD1+D0qUvUcbI6SizI+ZSVguAcczBrgkSzdVdoB26SY2hX/NG2dyfQPuA OkiD3Pytf6Nq1vpDoMMDoZMMp5yJ7/rg8KbHUzLXboGDrfLTqlViciCS7UbV6Q0t4dwigwj55Yl ddnuPrQ+4LhuOwMYqzohXGHwX4AR+2C8Da/Wh9eF9wzo14qwkLWMTm4LC5Fi8lSVuWJQlAZgAqI gGBE0nnTZ74kv7vmnbKEV2CzmCXj6AVUjHbiQ== X-Received: by 2002:a05:6000:2211:b0:43d:77e1:6a69 with SMTP id ffacd0b85a97d-4515d9a0330mr17864891f8f.38.1778224341647; Fri, 08 May 2026 00:12:21 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.20 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:20 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 16/52] cargo: set CVE_PRODUCT Date: Fri, 8 May 2026 09:11:09 +0200 Message-ID: <9747553fc34826f4a40f03ba329a856c48258e75.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:29 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236658 From: Peter Marko This removes mediawiki:cargo CVEs from CVE metrics. * CVE-2026-39837, CVE-2026-39839, CVE-2026-39840, CVE-2026-39841 Signed-off-by: Peter Marko Signed-off-by: Richard Purdie (cherry picked from commit a5cb71e7df95925a5c342c341e699e244b1b84f6) Signed-off-by: Yoann Congal --- meta/recipes-devtools/rust/cargo_1.94.1.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-devtools/rust/cargo_1.94.1.bb b/meta/recipes-devtools/rust/cargo_1.94.1.bb index 36ec3461135..f16688fc762 100644 --- a/meta/recipes-devtools/rust/cargo_1.94.1.bb +++ b/meta/recipes-devtools/rust/cargo_1.94.1.bb @@ -17,6 +17,8 @@ require rust-snapshot.inc S = "${RUSTSRC}/src/tools/cargo" CARGO_VENDORING_DIRECTORY = "${RUSTSRC}/vendor" +CVE_PRODUCT = "rust-lang:cargo" + inherit cargo pkgconfig DEBUG_PREFIX_MAP += "-ffile-prefix-map=${RUSTSRC}/vendor=${TARGET_DBGSRC_DIR}" From patchwork Fri May 8 07:11:10 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87696 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id E3C02CD37B0 for ; Fri, 8 May 2026 07:12:28 +0000 (UTC) Received: from mail-wr1-f45.google.com (mail-wr1-f45.google.com [209.85.221.45]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.8232.1778224344419685496 for ; Fri, 08 May 2026 00:12:24 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=tE6k/2ot; spf=pass (domain: smile.fr, ip: 209.85.221.45, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f45.google.com with SMTP id ffacd0b85a97d-44a044cb827so1304418f8f.0 for ; Fri, 08 May 2026 00:12:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224342; x=1778829142; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=IjqzCjQ5Uyjfr1eDAm5ln3Rfged/aPaw46opIqmR4Vc=; b=tE6k/2otav7KRRXNSAntAk7+ZFtdw8qmtdfzPn42SQdvVMjMruH3UKCu3c6jtkt4qW GwettkADVHFKwphCuGYHAkOaZUvyqrpJ3aEoe959Yr/N3KvEblhDBFnBQvNo2q/GVYXX kmEfOjBqRdhAz7lhDssD8hL8zqpecO4GeX1RY= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224342; x=1778829142; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=IjqzCjQ5Uyjfr1eDAm5ln3Rfged/aPaw46opIqmR4Vc=; b=rmmzdgzTgA3Q7bSyUrO2PuZ1J1AYifhppQpVjMLJlYlg5LQR7Sj1v08zQauLgBbS8i Q0PlNC4RZneivUeA3am0FOWMhVkiL83LdP8cCDAQozCvmfSRBKp848ksOyLwJzXxtR5R UG0hxkO3SICORpqXtUJnhYjktk+0XCy983mCcVTUI349/RVdHAz5lbJvniY8WShBgBGf D6yF2WtUCQRAe//CW0UIxGLwckIqxOM/A5mtjlkEffJ9sFS77DB+0sNqRwcg0JznkNNN 9GGP9sET68utsFkz7D/AkFv5a7DVJCZKzpUoEW1HowE1i5JfgYXuJN18YcqT2if2uoVH MC9g== X-Gm-Message-State: AOJu0YwARnST07EnUR/5PIkbkauFR2z8m3IP/EKaOdrxz0Ht+8I0ISLu ZTVOLn0CcXd7xlnhtWAwnYA8pRTYSCK6/aSu4Ceb+wBIlkDCMA1J5NgFJWRminQW3rgBtHAuEVe 0iS2v3zk= X-Gm-Gg: Acq92OGdg69RTOrLEI0kWdkXv+34MI8I/ckBhgvMfejpe58zEvqEMv+PkCb85pcLQV5 YLA8/g6+KHfby64Kd82imE1B2J6Vra84sQxK1DbY06usmYlXsS8uNioMwB+navUA1d1afEn3sS1 SgT9RDpMc6RJy6bZLEbMiqSAeASuw9DTqCeZp/J3+KnUmvT+BZTCEaNWDWJ7JuhLwIxNUPu4LIV ELMeMXgj+drCa2+CXukOaz+n4E6fIGEBauSEeTrp6/mbcV1doDMg85Jm0TQmlnvC0BYJFDcDYMP KXIWRdqQ7N5UTUb5z+sh4uo3+E1HOy3u1538bYQlvH3bZOw6hEV0g7fLOC0jfeMCjp11VZZB1ND aIK8CYxPIQ6J3K+V1wKAYvqPySeZhA/Yor7BkuXEKjs09I9+VaERs959fapn5fXUuZgt0Ktyh8d wpfwpn+ivmCe8GTJaOSKu1VL4jvAuWMHXHvOp3MdcJ3OgX8Hi61DR+yIcrUe5p+VAGv+12WYlhy 2Ic9b9Lms4gXnFzU3rCHhC7HsY= X-Received: by 2002:a05:6000:200c:b0:441:36b7:725f with SMTP id ffacd0b85a97d-4515b056aa0mr17933259f8f.5.1778224342300; Fri, 08 May 2026 00:12:22 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.21 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:21 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 17/52] ovmf: set status for 7 CVEs Date: Fri, 8 May 2026 09:11:10 +0200 Message-ID: <620bfc832a46bc4525e194e989ef4177460757ea.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:28 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236659 From: Peter Marko These reappeared after last update of sbom-cve-check tooling. "fixed-in" release was determined by following links in Debian CVE reports except CVE-2025-2295 which was taken from Yocto master CVE patch. Signed-off-by: Peter Marko Signed-off-by: Richard Purdie (cherry picked from commit 8cdfceff6606e00230551f6817289d751a414f0b) Signed-off-by: Yoann Congal --- meta/recipes-core/ovmf/ovmf_git.bb | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/meta/recipes-core/ovmf/ovmf_git.bb b/meta/recipes-core/ovmf/ovmf_git.bb index d731bca7f25..19bcc4a96fa 100644 --- a/meta/recipes-core/ovmf/ovmf_git.bb +++ b/meta/recipes-core/ovmf/ovmf_git.bb @@ -48,6 +48,13 @@ CVE_STATUS[CVE-2019-14575] = "fixed-version: The CPE in the NVD database doesn't CVE_STATUS[CVE-2019-14586] = "fixed-version: The CPE in the NVD database doesn't reflect correctly the vulnerable versions." CVE_STATUS[CVE-2019-14587] = "fixed-version: The CPE in the NVD database doesn't reflect correctly the vulnerable versions." CVE_STATUS[CVE-2024-1298] = "fixed-version: fixed since edk2-stable202405" +CVE_STATUS[CVE-2024-38796] = "fixed-version: fixed since edk2-stable202411" +CVE_STATUS[CVE-2024-38797] = "fixed-version: fixed since edk2-stable202502" +CVE_STATUS[CVE-2024-38798] = "fixed-version: fixed since edk2-stable202511" +CVE_STATUS[CVE-2024-38805] = "fixed-version: fixed since edk2-stabe202508" +CVE_STATUS[CVE-2025-2295] = "fixed-version: fixed since edk2-stable202505" +CVE_STATUS[CVE-2025-2296] = "fixed-version: fixed since edk2-stable202505" +CVE_STATUS[CVE-2025-3770] = "fixed-version: fixed since edk2-stable202508" inherit deploy From patchwork Fri May 8 07:11:11 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87692 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id CA623CD37AF for ; Fri, 8 May 2026 07:12:28 +0000 (UTC) Received: from mail-wr1-f50.google.com (mail-wr1-f50.google.com [209.85.221.50]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.8233.1778224345014156295 for ; Fri, 08 May 2026 00:12:25 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=dzk9Sv2x; spf=pass (domain: smile.fr, ip: 209.85.221.50, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f50.google.com with SMTP id ffacd0b85a97d-44a74032ff8so1244005f8f.1 for ; Fri, 08 May 2026 00:12:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224343; x=1778829143; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=4TEIKOBMVA1PgHAg1Csl9hdQ80hXNWXoMKH4/Kc/uuY=; b=dzk9Sv2x4TjJB1G5hBcK6DYPHZbqn4SzVA+BiqObTfV3kgXe+18jQ9fMmFR3ORvAlQ ZhjFWso+AsnYRESVAYIv9nXx/Ir14p8V6Kl6w5gMxk/90E+1dGL2FNIRMyNcn5ABwyJ5 2ppxWfIxrLdwC75mbJYi7x2/1jj+RLPoHom3M= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224343; x=1778829143; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=4TEIKOBMVA1PgHAg1Csl9hdQ80hXNWXoMKH4/Kc/uuY=; b=HbS5AT4/68tFUAAPdq5rjC79xt9QXjx3+IZZ/9TpNkcD3lCez3PndOboFvFhR3upPD W6qbauNU2RKSqstBKr8rI0tG1fbmuwRCGS8Zh+v6i9accb06oeU8Zg4hcPga8N4MJTvk UDw774lk4GI7hrCFPZAjj2t93QhC95NnvzsrS9HKErI+CnrtQMeuK7s+qhgMcyxBaEbL I0gGAzvlqvceJCMK0zA1DRR1xovQWB9rLri01ky7z+QJXyzMvq7HmbzqhjoL9uSB7geA x9awCqqxSiJkCN4t/iRQuzgcWK93JQLgRlty3wI4M5eHJuSxjWKt57ZzuPHWVTkRASPP 04Gw== X-Gm-Message-State: AOJu0YyxtqpAxu7naH5ODGbl+ZTkLdPzglCs0aG/x8FZaD73/Cn9Kv/f ovdUdZVU78Wuh6CHBCgXh+zx9NpEReLsVqfTcW1KacCN/B/0DUNg0eLXQCyiT3PBY3X4ZKz6yQR 3jQ2YG98= X-Gm-Gg: Acq92OGAiVd9BtQYP2YmgVQbkLoPxcYXfFNShfvaxPCXzlHX+a99zHuq+Ztqx6t/rCt IiMKSkr/Uxu1G+eKqDs1ek50iGq+zKAzCvSnud9pc5IuEvfNNr5LnjEkldqIDYVSoopMVtcrXgx rxLbkLSrGaqF94jUaGhjYIASj8El4tL0PZ0678mxAG481p3z3J2riuz6ykB4OWujT8RjbzxhBaN qw6EYCG4hnj1dX+LYZV0W1MKPjfZ+qnlQk65xr0KUIl5gqpFQN3dgIC75PXlCzAeEF54GeOx6oY ueMQrWs06TPX99N5A0ks9guL82hq8l4GRagcTsNDKKNo5QS7ir3NBUC9Ony57TAJebZx0YlnoPd 3Ra6ZwXKMDAWw1u88YUqJ2oa9aT2MyAqOaxnyYgObZWobcE7dvs1bEzZzQwJTkTABo5MTDHGU4W ixX8K4tytttn51+HclWx6rmfyHhH4/fvrf8YqDlqc/F7zHRXrdqVYItWkm+gwJAhIJaKLnVuRLX zIc4QkEvkE96LLiU1fB2+myokY= X-Received: by 2002:a05:6000:18a5:b0:43d:1dfe:350a with SMTP id ffacd0b85a97d-4515ce1c991mr18331112f8f.22.1778224343087; Fri, 08 May 2026 00:12:23 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.22 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:22 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 18/52] sed: upgrade 4.9 -> 4.10 Date: Fri, 8 May 2026 09:11:11 +0200 Message-ID: <01b601952c95e7b1fababa25f4c7e275df85cd62.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:28 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236660 From: Peter Marko Solves CVE-2026-5958. Release notes: [1] License-Update: copyright years refreshed [1] https://gitweb.git.savannah.gnu.org/gitweb/?p=sed.git;a=blob_plain;f=NEWS;hb=v4.10 Signed-off-by: Peter Marko Signed-off-by: Richard Purdie (cherry picked from commit d1089f9fcebf4bad3ce8907b2597d4a320af1458) Signed-off-by: Yoann Congal --- meta/recipes-extended/sed/{sed_4.9.bb => sed_4.10.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta/recipes-extended/sed/{sed_4.9.bb => sed_4.10.bb} (95%) diff --git a/meta/recipes-extended/sed/sed_4.9.bb b/meta/recipes-extended/sed/sed_4.10.bb similarity index 95% rename from meta/recipes-extended/sed/sed_4.9.bb rename to meta/recipes-extended/sed/sed_4.10.bb index b30ddc73ca6..0966ce6a132 100644 --- a/meta/recipes-extended/sed/sed_4.9.bb +++ b/meta/recipes-extended/sed/sed_4.10.bb @@ -3,7 +3,7 @@ HOMEPAGE = "http://www.gnu.org/software/sed/" DESCRIPTION = "sed (stream editor) is a non-interactive command-line text editor." LICENSE = "GPL-3.0-or-later" LIC_FILES_CHKSUM = "file://COPYING;md5=1ebbd3e34237af26da5dc08a4e440464 \ - file://sed/sed.h;beginline=1;endline=15;md5=4e8e0f77bc4c1c2c02c2b90d3d24c670 \ + file://sed/sed.h;beginline=1;endline=15;md5=3baf8c344ffa6281a98c30294ac62a6c \ " SECTION = "console/utils" @@ -11,7 +11,7 @@ SRC_URI = "${GNU_MIRROR}/sed/sed-${PV}.tar.xz \ file://run-ptest \ " -SRC_URI[sha256sum] = "6e226b732e1cd739464ad6862bd1a1aba42d7982922da7a53519631d24975181" +SRC_URI[sha256sum] = "b8e72182b2ec96a3574e2998c47b7aaa64cc20ce000d8e9ac313cc07cecf28c7" inherit autotools texinfo update-alternatives gettext ptest From patchwork Fri May 8 07:11:12 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87694 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id BBE91CD37AA for ; Fri, 8 May 2026 07:12:28 +0000 (UTC) Received: from mail-wr1-f43.google.com (mail-wr1-f43.google.com [209.85.221.43]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.8234.1778224345630276722 for ; Fri, 08 May 2026 00:12:25 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=mPieOZ3n; spf=pass (domain: smile.fr, ip: 209.85.221.43, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f43.google.com with SMTP id ffacd0b85a97d-444826c16ffso1480557f8f.1 for ; Fri, 08 May 2026 00:12:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224344; x=1778829144; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=A/tUb0c4w7uSZx4c+KOXtqc3Uk7o5RfhEr+gtebHMys=; b=mPieOZ3n5hlqf3VWyFNwQqbjWqGdF8EBBKPHFXiUUAItpwvePr6gDpm5OVxpcg1wfx aWxaE/gKLkJY/n8FaDozMdkQ2LYSSpiQljiOxHfuX6ohMiZSbLjwle19J1muMDh5ptmL WtDwHLSEdrvhhwUWFE6dmz2d4YEL/935xqR+Q= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224344; x=1778829144; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=A/tUb0c4w7uSZx4c+KOXtqc3Uk7o5RfhEr+gtebHMys=; b=hfyV8nLntjjAyf8fWNH0ro91KrtOr/M/Fc9XlKzsRDKC74z7pi3BI8Q0DT0I4+gs6L Nr+QK9RkKSzqOvVwUZGA7tQjUWbaqBdEYBq++XhJ9/CP6dOPk9q+aGtaiL/iSApWJ9ey dS1fwViQ36/0qFJehSU1P3YvP6ONaAHGZ+1ZX7bgQpnostFFBTpqPSNqp+bCTLq2kttt GaHid7zAPq0TxnLSMuJ1W6LomCjY5M8zqS8WxGt23HipM33obQuGJvNTnSjjjh9kHRHf OzA4A5MNYEFfVtvn5Z2+iynG7jpRqAloeQMbNWD0kPipm0w4Cg1f3x/NET5ic9eVrAD3 V9lQ== X-Gm-Message-State: AOJu0YxBY9xP/SfeiBrII62uCsQC5CHgNBNW+usNc8hL5Qa45bHDjdFk Zuit9CMUZoinRpGgdlyn64djLvKn+KKGTdhLCkbsD7IIRcU9KT7ETTZgU8VwZ2wTWrQvO6qoM90 v8BHFZP8= X-Gm-Gg: Acq92OF54CvO5DvHiZ6FO9vZylA2tuYFI5Fa7cs9g5RsPG9uU9SSkr5E1lWGULwyakN JRTMgNseQvJr8nFSAL8l8jLabUV6V4VbIn2vvRNUW3PYh69F08sJVknBecOKYeCCA2twmz8PYPS 97aEeCiQp4dXvs5bpGBWKsFkmc2d0Rb3B++d3jvBniu/HJ+MNEIFnpEbEsfUFMcxshZP8cWzzss GyvUiA9JX8WJL0IwYqAEVtCuzUuTAxoMzLtSqwervyeo/pkqpqexMLj3w/iTUq+N70Gowvcq34W yxcGfmWIQzf/l7G0B9/tkk6gjXnVLpclRt4tI0pXAaEIaQdW+ejZQpwUy6LWuU3hfr8Mj7zORpA RRHR2L+Aa58J8oQT5JS8LVgSisyX7qGvza9W5w1WG9nnE5Yzoob1sSDry8wQ7Mp2MdTfn1JA/mh SvL+fcJEbkNav4YD0XKocLhrIn+V0oXUUqSDhHTd9OvvbTZRYHVngkl+ZaN5ExVhWkUOv+IiLfH K24ObQxYn44K/N+wY5pk2j0YbaatuuXPjnyghfG7lFx/v0C X-Received: by 2002:a05:6000:144c:b0:43c:4810:dc4a with SMTP id ffacd0b85a97d-4515da9619bmr17962120f8f.38.1778224343640; Fri, 08 May 2026 00:12:23 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.23 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:23 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 19/52] classes/base: add explicit bzip2-native dependency for unpacking .bz2 Date: Fri, 8 May 2026 09:11:12 +0200 Message-ID: <8e4d03a616246eaab9f15b4140c95ca9b709b89e.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:28 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236661 From: Ross Burton Currently this is in ASSUME_PROVIDED and HOSTTOOLS so doesn't have any effect, but declaring the dependency is the right thing to do. Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 05e14c476823b7598ed063c5ef758d94cdc222fb) Signed-off-by: Yoann Congal --- meta/classes-global/base.bbclass | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/meta/classes-global/base.bbclass b/meta/classes-global/base.bbclass index f2e8326e39a..62f2814bb71 100644 --- a/meta/classes-global/base.bbclass +++ b/meta/classes-global/base.bbclass @@ -657,6 +657,10 @@ python () { if path.endswith('.lz4'): d.appendVarFlag('do_unpack', 'depends', ' lz4-native:do_populate_sysroot') + # *.bz2 should DEPEND on bzip2-native for unpacking + elif path.endswith('.bz2'): + d.appendVarFlag('do_unpack', 'depends', ' bzip2-native:do_populate_sysroot') + # *.zst should DEPEND on zstd-native for unpacking elif path.endswith('.zst'): d.appendVarFlag('do_unpack', 'depends', ' zstd-native:do_populate_sysroot') From patchwork Fri May 8 07:11:13 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87691 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id A8C82CD342F for ; Fri, 8 May 2026 07:12:28 +0000 (UTC) Received: from mail-wr1-f42.google.com (mail-wr1-f42.google.com [209.85.221.42]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.8235.1778224346980659464 for ; Fri, 08 May 2026 00:12:27 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=skz3Og7n; spf=pass (domain: smile.fr, ip: 209.85.221.42, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f42.google.com with SMTP id ffacd0b85a97d-44dd5cb0f81so1752453f8f.0 for ; Fri, 08 May 2026 00:12:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224345; x=1778829145; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=s3wv9nwsrzZWMPevZgWN8mdOVpQvjpqK+Xw6s6FexR0=; b=skz3Og7nm7pfFOJfE3j5iEfXs28bn3xLD1+w/RSOLgElQFMEb2yx/L4KZXQhVHT27Y L4k6Llzl0T6LvO37WDkSz0c9QxIFdvYl6OQAMCvVHq1FpxKkludsVKfnfUZfBBfJjrwI RdlWdtd3iOB99QNoyteO8QRZslKSXUZoUvqTA= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224345; x=1778829145; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=s3wv9nwsrzZWMPevZgWN8mdOVpQvjpqK+Xw6s6FexR0=; b=rn3Y6U11OsMOOBGnM2QYZ508yjOM8pmMM/gnkkhFvd1198WOYPpzaDqWYO2ynyB+nO QbMEEMmCpytp4U4goDDCv9+qh5yVC+l9u/a072L+WrRu8nsEFE8XDtPcclItXZyRI0iW mukCm1hP1T1Ygwzvv5U2q5tcE5cbtYIcCwreuNDNYYh+AYRNRFoxphnGBWr4UkcjH+6H rJFl+q+9ZXsc/7ZYdehGf1rWrcrEQRcg047CGsDZrfiIKMrOzJso6bm+lEmnSBf1ZYQl rYg23+B6yaUQArpDDBD5PghmO/PPXZ4wdp3LIwQkTwjiu8uPjZJPUuzFAIGSJzSkul+m JoWg== X-Gm-Message-State: AOJu0Yz8tZwevLohK7uGnRJJUfBCoH1WA36zR1nlJL6dhVxbnbalJagB pfvVzyydFaotY0ZodHzwB6kexw01gLygeIZXVz2jdAf/nzMJOobW6Q8n7dkgZbOpBgy65+BVhLn OuPBgtp8= X-Gm-Gg: Acq92OHDT6ur2F09TO+5OqyHIcMMa/3R4wZsGfZ9V2xn3N+eE6robnEuJk9w9uLS0uB e7YBKmuQf/FK0xTbgiLb7nTK3h1OTh6f95j3211S+67JpIXpHUu+K58nn4hp6ldqhuv23Tv0qFt GwHfQ/aYJ4ckRanIunn/b8Dd+5pf1sNsxMz3A001XmXDoZn8lm8D//wmykpLJ5D6BEL4+LrHdWZ mmkyUz3gICobxHk+yeolUfGDYtYMBYjENLlkt4Pcd4HQ8C5Wkbl8wBLFPXtQDAZ8VfYmRctx7BL DQ4ZxutzDdil7J6CFST9ZuHnMWb7eyLUTaYGevnmCrWhVbI+ICGP7UfdE6o3GGoiIiO5gR15cxu cu3hRmYsEl5x0e8kZx5vbe7yeQIWPPWjSXX1ZuVpZEZNnapGxwJ3tUwe4HormD4lb8SZl3UdlPB YEE1oiiktKgDZv7O7nMy67Vb18g8M8se86mdaJIzWwro//q+C3yWPY/5f18Nk+bcJ0o8m/ujUyB jy4GaOtToibX5e5tXsxcqyyIHvSZOn0jxZO+g== X-Received: by 2002:adf:fa0c:0:b0:451:b3ca:674f with SMTP id ffacd0b85a97d-452e78b3e99mr7315998f8f.1.1778224344747; Fri, 08 May 2026 00:12:24 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.23 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:23 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 20/52] ccache: upgrade 4.13.2 -> 4.13.3 Date: Fri, 8 May 2026 09:11:13 +0200 Message-ID: X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:28 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236662 From: Wang Mingyu Release notes: https://ccache.dev/releasenotes.html#_ccache_4_13_3 > Ccache 4.13.3 > Release date: 2026-04-12 > > New deliverables > > Added glibc binary release for Linux riscv64. > [contributed by Ludovic Henry] > > Bug fixes and improvements > > Fixed handling of empty responses from remote storage backends: a > response with an empty body is now treated as a storage error rather > than a cache miss. > [contributed by Björn Svensson] > > Fixed PCH invalidation when the MSVC toolset is updated. > [contributed by Philipp Kolberg] > > Fixed base_dir path rewriting when using MSVC’s /Yc option: paths > are no longer rewritten to relative when creating a precompiled header, > since MSVC then does not like relative paths for the /Yc and /FI > arguments. > [contributed by Joel Rosdahl] > > Fixed handling of a directory-less path to the MSVC /FI option. > [contributed by Joel Rosdahl] > > Added support for -fsanitize-ignorelist (which replaced > -fsanitize-blacklist in Clang 13). > [contributed by Joel Rosdahl] > > Fixed detection of type for compiler with . in the name (e.g. > hppa2.0-unknown-linux-gnu-gcc). > [contributed by Joel Rosdahl] > > Fixed install.sh to correctly use sysconfdir and other configuration > variables from the Makefile. > [contributed by Joel Rosdahl] > > Build improvements > > Changed cmake/FindCppHttplib.cmake to use settings from the system’s > CMake config if available, supporting systems where cpp-httplib is not > provided as a header-only library. > [contributed by Jiri Slaby] Signed-off-by: Wang Mingyu Signed-off-by: Mathieu Dubois-Briand (cherry picked from commit 30f9f7aa9e3e3fad9d755f71d54263f3753f63c3) [YC: Added changelog] Signed-off-by: Yoann Congal --- .../ccache/{ccache_4.13.2.bb => ccache_4.13.3.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/ccache/{ccache_4.13.2.bb => ccache_4.13.3.bb} (93%) diff --git a/meta/recipes-devtools/ccache/ccache_4.13.2.bb b/meta/recipes-devtools/ccache/ccache_4.13.3.bb similarity index 93% rename from meta/recipes-devtools/ccache/ccache_4.13.2.bb rename to meta/recipes-devtools/ccache/ccache_4.13.3.bb index 9fe82f5ee0e..ec440900f64 100644 --- a/meta/recipes-devtools/ccache/ccache_4.13.2.bb +++ b/meta/recipes-devtools/ccache/ccache_4.13.3.bb @@ -16,7 +16,7 @@ DEPENDS = "zstd fmt xxhash" SRC_URI = "${GITHUB_BASE_URI}/download/v${PV}/${BP}.tar.gz" -SRC_URI[sha256sum] = "e87efda8ae54f94b1cb0e8dbfdf26397bd7d0a9c0c4f38b18dde73f4ec9ac721" +SRC_URI[sha256sum] = "c149d71f47f6fe08e4f2e43db4b0b091c61e8ea3daa23aa998b094bd84ecdfe8" inherit cmake github-releases From patchwork Fri May 8 07:11:14 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87690 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 973B7CD3436 for ; Fri, 8 May 2026 07:12:28 +0000 (UTC) Received: from mail-wr1-f42.google.com (mail-wr1-f42.google.com [209.85.221.42]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.8236.1778224347529930109 for ; Fri, 08 May 2026 00:12:27 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=xUgbcpsM; spf=pass (domain: smile.fr, ip: 209.85.221.42, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f42.google.com with SMTP id ffacd0b85a97d-43d76dd4ee8so1462457f8f.2 for ; Fri, 08 May 2026 00:12:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224346; x=1778829146; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=/TzJmZ8K6jIbzEZWR8y2IDNrG5pJxo7Ge+iSF1RNnLE=; b=xUgbcpsMVqBwaaOSOpQCeaH5vaMgh48gBI6GckJs/9FnNoSmzm7nbhRRpEhtNNMvCY oSjPpe9RlPxaRM4YkrQq5bU0GoJNKa0caQz4/epPfCk0tfGKhFmwmfn7G+p4wpvsbkG8 IhxeRUfGefBzt1sTOze+HzOkkuMAWZ/0pJVr8= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224346; x=1778829146; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=/TzJmZ8K6jIbzEZWR8y2IDNrG5pJxo7Ge+iSF1RNnLE=; b=Q0BEAzfuhvsVmFzSwIa0eMp7sVOxUxhPfAIwx+YboN0t918PjIHLNvsC0rK0aNnNyz jm5Dp+1a4xM317/sQRrURnvM2CpJndhVs9ZSS50l0UBuuxntyiXGHBsR0hip/SB5bqp6 kB9pHtdo0/r+nV5a5bq8fv7017PMlHlgiVNW1/7YLVhDhbDVdtFEhVgCvaJkIik0JYs3 tSQ60lvXqy7I+48zxqoXF3FNLwFQxX5M0yH7/rjVBTi6FM0KQQ9X33Xd8otzlmoSHpi+ P2cBwQX97eLFo8Q10sbGLX15OkrBFzkorbNjeFbQKVcUr5vxuOPnO2J2cuE0rw6wwtKP /hwA== X-Gm-Message-State: AOJu0Yw7g4GFY7zKkNrOIiDqJQ0odbPe+9duVG9TAGoLmrJ15IdGv/2k IDr1h1zJEnG0vn7HYRsWiPoasVTxQFhigUwm0csxqdiZXTQTMxa0Jri3OzwR7nuEM8OhWerSQKc fZFzTXw0= X-Gm-Gg: Acq92OEGBqZgs31ES+rntc/iZ+KfTLrF/hxfDnYmr5d2WlpXzIjScb8Mzb+RdMiyqyX XSr3N3L1cLD4eRtZ+arcNARnJAxHBitpDo8AjupXT5SbG9XfLAenixKcUgi8E+k9U4r0bsSGB4v sjI8r5F+JjzNttxAef56GkChOA2N9fD+ejmOyUYLP9OOP0en8xtbQc4GorfZJvTeaL6NMxhPdtM AyoNH9NgZwDYE7p/wpfwX2lXaOSOq495Q3Ndu7po0wFyxTIwEBPXXdDMVbufrf9EXkzbeWcP6Ti WHMxevFTlbp0gxb3bhM9h2cLzBGPbidkvYRDbrX4CQyfJVoPFAPP0u4PAkK1MJ5koLOORmtWcTv Y7FeyQcTozSQkX0oabHEitovd7dDm3FmdhN854q2RzUkDmq8PAxoDCPbuK3VtUTRtMRNWwpW2f/ DVoOFpUwNHDSK75DV0MogP06+FX9VCptKhXoTfOfKu1jffieN18wXMhkkJhJHvWabbPb+ftJGab G0UfhhO/8vH2Rw6Z+DroTC5JaZxKB7GT6tMaw== X-Received: by 2002:a05:6000:2c01:b0:43b:5b25:67f8 with SMTP id ffacd0b85a97d-4515ce1c515mr17041563f8f.20.1778224345370; Fri, 08 May 2026 00:12:25 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.24 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:25 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 21/52] dhcpcd: upgrade 10.3.0 -> 10.3.1 Date: Fri, 8 May 2026 09:11:14 +0200 Message-ID: X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:28 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236663 From: Wang Mingyu Changelog: ========== - BSD: don't send uninitialised memory using ps_root_indirectioctl - Fix fallback_time option - IPv4: Ignore DHCP state when building routes - options: Ensure ldop is not NULL dereferenced - route: Routes may not have an - options: Ensure that an overly long bitflag string does not crash - options: Don't assume vsio options have an argument - common: Cast via uintptr_t rather than unsigned long - privsep: Ensure we recv for real after a successful recv MSG_PEEK - DHCP: Add parentheses to macro definitions - ipv6nd: empty IPV6RA_EXPIRE eloop queue when dropping Signed-off-by: Wang Mingyu Signed-off-by: Mathieu Dubois-Briand (cherry picked from commit 6b19f10275be502a9602f51b6227e4a51d6c8fda) Signed-off-by: Yoann Congal --- .../dhcpcd/{dhcpcd_10.3.0.bb => dhcpcd_10.3.1.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-connectivity/dhcpcd/{dhcpcd_10.3.0.bb => dhcpcd_10.3.1.bb} (97%) diff --git a/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.0.bb b/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.1.bb similarity index 97% rename from meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.0.bb rename to meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.1.bb index fca7d8b11d9..c940d6806a6 100644 --- a/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.0.bb +++ b/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.1.bb @@ -17,7 +17,7 @@ SRC_URI = "git://github.com/NetworkConfiguration/dhcpcd;protocol=https;branch=ma file://0001-dhcpcd.8-Fix-conflict-error-when-enable-multilib.patch \ " -SRCREV = "385ff246cbdbd1627582999f7705bf9ef2ad0d7d" +SRCREV = "42ff6d2548209af3185473e6cb6f9d235c48bbf4" # Doesn't use automake so we can't do out-of-tree builds inherit pkgconfig autotools-brokensep systemd useradd From patchwork Fri May 8 07:11:15 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87702 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 82639CD37B7 for ; Fri, 8 May 2026 07:12:29 +0000 (UTC) Received: from mail-wr1-f52.google.com (mail-wr1-f52.google.com [209.85.221.52]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.8164.1778224348277607293 for ; Fri, 08 May 2026 00:12:28 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=hh/AlUsW; spf=pass (domain: smile.fr, ip: 209.85.221.52, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f52.google.com with SMTP id ffacd0b85a97d-43d73352cf2so1333566f8f.1 for ; Fri, 08 May 2026 00:12:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224346; x=1778829146; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=7+bENV1pMyRkJ6Vyu0Hnqfa3ummYzCmPyBLwQjXEtAo=; b=hh/AlUsW/SKoRCEXLvn9CZxJktvlQ2Iwlt98zxUYUDAkMCDyUL+kS2R7JDgPjRO/Zh BcT9US3RVwm+JUmIdYjsnI4d+5NTslxT7TbSe6vsFLzYAc5vHu6FzxVqQCkRpifTZGGe IXHYkw+0+LTc3RQEBY//XJ0y4MYDP3VmnjCpY= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224346; x=1778829146; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=7+bENV1pMyRkJ6Vyu0Hnqfa3ummYzCmPyBLwQjXEtAo=; b=VQUF1Vs04gbzDQg+OsUwUjpPeV1MDeAKI/nXofguBreOnrs9Ufq0ZSsT+dREL8GPj9 KKmVGqaEicF8+Vds7NkPZT/WYxNUGOPl8AAdnX3N74PzaeUF6v5loLiIYwpph1YV0HmO t1cWhxb4JFjOQ9SBL7Y/otOLEc0oBDjU0Aw+oEqU/x1PA0uU/cVYWH+wzYjusI/RLREI two/I2c35++Wf1BnwEmlkT4suNhFy93AoOBgby/LmP4CgeO1L/solgPNN4APwpUQdA18 4ZtnNh3gko/ncjfZgt+2kbd7xnisxxpZIvX5SGEcAdRzTvGBvR1whrCIbAiCnW6djdoP mJoA== X-Gm-Message-State: AOJu0YyA6OiaAeCIJVZEwx1XogU0qgrIxNIP/uGaGs/hhjgKfGrKLQzq lt+4/b4KPlsfNBNeKqHo+gkeAc9cwiPLrycV3D7w06dSFMJKbvUZ47Lq5Y535eZEk7z9yLYmwjE 7ZMbFCdg= X-Gm-Gg: Acq92OFM9SiPNDWy1G0Sw/F2DOp92+uBMAohSmqoaGQjbR8tC+GOv7/lkGJtF1oIE6w waxd61oR6oeTs/RJs/qKcpFbigCvhvgqBCaRzuzLOF+3OXkgAyiMKqH3gl7t7qyFXUFHuHrCADy H38TIGTtjeS1+C9VWQFkzI3U+e3/2kjQnj+KvZN9idAxo6NC737kCKvcKvz1kbiNMuELdEx+Fq8 twsVwXMN/hRz7WBdFjwQgtpNO4dJaSgbYBT02lu8VljK9EXG5vr4vtccmzBWe2UyI9wvrhvO0q5 +61n/p1M4SGCtYTU5MlHOlBwpLqwSjZnhif79f4wxhW9YHS6HrDsfAxB3klH78tief+1xJ7R7dD XYd6z9sS0cNaz4kHksVPbuYFpSBd/GnazwgM/wIcw3wqVLfIBaduNrHI+0Nd9skrGdKC8xsVaU4 rjUcQhNp+3ylZW+/JRAtVfAK/bcTkIPsclwdfDGWCNvEtTiFA6ZNqJma+I9v5NWq00wwi+Nd1bx S7ARwYV+7rZgAwuo+QAY+LxK/w= X-Received: by 2002:a05:6000:24ca:b0:44f:da08:18f2 with SMTP id ffacd0b85a97d-4515b5241b2mr18335354f8f.12.1778224346166; Fri, 08 May 2026 00:12:26 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.25 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:25 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 22/52] groff: upgrade 1.24.0 -> 1.24.1 Date: Fri, 8 May 2026 09:11:15 +0200 Message-ID: <8eae456fbe82e4230b9d519e605f349acd220bea.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:29 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236664 From: Wang Mingyu Changelog 1.24.0 -> 1.24.1: $ PAGER=cat git log --format=oneline --abbrev-commit --no-decorate 1.24.0..1.24.1 --reverse ebff939de ChangeLog: Log 1.24.0 release. b7ed0adb9 NEWS: Fix a cosmetic oops. 395f381c9 src/devices/gropdf/.gitignore: Add. 79c950d07 ANNOUNCE: Update template for next release. b8ef50a3c FOR-RELEASE: Update procedures still more. c6fadff4a HACKING: Make further clarifications. e824efce3 MANIFEST: Add item for "contrib/install-font". 7152a44c0 HACKING: Add adding/removing components section. 4f09e7438 FOR-RELEASE: Fix wordo and resequence item. 991c72f8d LICENSES: Update heading. 900841e99 PROBLEMS: Fix grammar nit. d37235816 Fix typos in top-level plain text files. 91e456e53 doc/automake.mom: Fix typos. fe3db5400 [doc,man]: Fix typos. 51bc75c0c gropdf(1): Fix typo. e4b1d4c1f eqn(1): Fix typo. 75d77b7dd tbl(1): Fix typo. 669898d53 groff_mdoc(7): Fix typo. 75850a599 tmac/*: Fix (repeated) typo in comment. 9e162946b .gitattributes: Add some "Linguist" overrides. 6e467c234 [eqn]: Regression-test Savannah #68115. eee74c1a8 [eqn]: Fix Savannah #68115. d99cfd9d7 ANNOUNCE: Acknowledge Rocket Ma. 8a6b787b8 [doc,man]: Tweak documentation. 1199bb8db groff_man_style(7): Further explain portability. 67db10f1d doc/groff.texi.in: Parallelize with groff_diff(7). 738d7a66e xtotroff(1): Update copyright notice. c60093c10 xtotroff(1): Fix unescaped hyphen. 5f8492275 eqn(1): Update copyright notice. b9d07e0cf eqn(1): Add "roff interface" subsection. fa1459060 groff_mm(7): Tighten wording. dc92c2252 HACKING: Add more on component maintenance. 02095b504 contrib/chem/README: Tighten wording. c7cd4564e [mm]: Update provenance notices. 977034df0 grog(1): Fix mangled man page cross reference. 469bbb2ba roff(7): Fix content and style nits. 8fdeff7d5 [doc,man]: Simplify description of `warn` request. b4b599e7f groff_diff(7) Advise reader of prerequisite. f0f7c804a groff(7),groff_diff(7): Update cross references. cdb97b959 Seed random number if SOURCE_DATE_EPOCH is set. 752a371a6 ChangeLog: Tweak style of most recent entry. c47dd4ea9 ANNOUNCE: Acknowledge Peng Zhang. 37f0060be groff(7): Document `.S` register as reserved. 95bd5f043 [doc,man]: Make groff(7) introduction cohere. afa03a297 groff(7): Improve descriptions of `\A`, `\B`. 71bf66d0d doc/groff.texi.in: Tweak documentation. 45afde2cb [troff]: Regression-test Savannah #68132. 9c4e2c8c6 [troff]: Fix Savannah #68132. c71b99984 Use sequential tag names to avoid possible random duplicates. cdd553bfe ChangeLog: Fix missing word. 7c04b4254 doc/groff.texi.in: Tighten wording. ba0908298 [troff]: Improve error diagnostic. f0be0a65f groff_man*(7): Clarify paragraphing macro actions. f9420c7b0 tmac/troffrc: Fix misleading diagnostic message. 2e238889c xtotroff(1): Cosmetically revise copyright notice. 7d2fef66a HACKING: Revise material on copyright notices. 833430738 HACKING: Add info on committing changes by others. 6b9a211f2 ANNOUNCE: Acknowledge Dave per commit c71b999842. 5471491b1 ChangeLog: Revise format of earlier entry. 103561eae Update for groff 1.24.1 release. Signed-off-by: Wang Mingyu Signed-off-by: Mathieu Dubois-Briand (cherry picked from commit fc38c33acc062df3c707793a9afead28d082bc8d) Signed-off-by: Yoann Congal --- .../recipes-extended/groff/{groff_1.24.0.bb => groff_1.24.1.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-extended/groff/{groff_1.24.0.bb => groff_1.24.1.bb} (97%) diff --git a/meta/recipes-extended/groff/groff_1.24.0.bb b/meta/recipes-extended/groff/groff_1.24.1.bb similarity index 97% rename from meta/recipes-extended/groff/groff_1.24.0.bb rename to meta/recipes-extended/groff/groff_1.24.1.bb index 52cb17d5ffb..24b8146a727 100644 --- a/meta/recipes-extended/groff/groff_1.24.0.bb +++ b/meta/recipes-extended/groff/groff_1.24.1.bb @@ -15,7 +15,7 @@ SRC_URI = "${GNU_MIRROR}/groff/groff-${PV}.tar.gz \ file://builddep.patch \ " -SRC_URI[sha256sum] = "e79bbcd8ff3ed0200e7ac55d3962a15e118c1229990213025f2fc8b264727570" +SRC_URI[sha256sum] = "74e2819795b6aff431aeac983d63a9c8968eeaba2a2eba7df8ba4c7b41e7cfd8" DEPENDS = "bison-native groff-native" RDEPENDS:${PN} += "perl sed" From patchwork Fri May 8 07:11:16 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87703 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 88356CD37B8 for ; Fri, 8 May 2026 07:12:29 +0000 (UTC) Received: from mail-wr1-f54.google.com (mail-wr1-f54.google.com [209.85.221.54]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.8165.1778224348890459769 for ; Fri, 08 May 2026 00:12:29 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=EnIgVxdE; spf=pass (domain: smile.fr, ip: 209.85.221.54, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f54.google.com with SMTP id ffacd0b85a97d-43d76dd4ee8so1462471f8f.2 for ; Fri, 08 May 2026 00:12:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224347; x=1778829147; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=/ypa7iWc2XxTgMme0FQcU7v06Fm+KDi+acHzfH8ysU4=; b=EnIgVxdE9q/E+PxcTfoos7e9RWy5lFfjF17PLWYzYHfJlhuysSTkajXHZ1MPWsXipp SBapFMW9n4WEYGHM7zgZuNyLnPvGrKEhq0PDfdLlm/kGlxsANwhnO7Fuk+W+E3RrPDxs Ghx5r3zqwIPUE6FidyaA1IIMWltJxjJANCGMU= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224347; x=1778829147; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=/ypa7iWc2XxTgMme0FQcU7v06Fm+KDi+acHzfH8ysU4=; b=lgxOnVDh9o2HZvvTXOLoLwc9JAIHtgzmT2mktJDTYlHZMfFNQupur9H5vBDojgidxC by34Cos9U4+rtP8r7t106eu8X1ULgHa0G0Bxl50COZhfBtyAWMRWuvYJwaX1EmKI25/t D0wOnpKXoOowMyUR3E71HsqCF6QhqsvwpFJBOwjG1JbixhSjxszSzQZOagYIYm748TrR pUbPLB3yE0pO6I/Ju78HRSvVkUtMX2zVw69IPEXJsSf7kURjuDQTXZxe3rqGFIxQnwL5 C9n3kxaX4VYx6YGsGjqY945fnVnoW7O+F3xtE1+iLWsYnuY4oSE42kBpFFqqPOYOlw8Q dmeA== X-Gm-Message-State: AOJu0YzEs+FYugQalrhnUanVeTvrpYqJLTHr7ywDqWmLpjv+/KvuAkDt xwMNNwez5g04ulGKR2Hc8e0tRMeZh3SZsz6UG33m6UJmbUGLmlvZS5IJ6CBZ6zJ+u/TXGwzY8Cj 5x6kIWeQ= X-Gm-Gg: Acq92OEpUcrY9QCkDRXt5AcFCgsThP8zboufZr7qRFRE6q9IqVR1lVQqWrFjQiTuJ9M YApHo5PiGZV1ASkjY6qSHWM7lY+aCPlxBQKsCsUPNZ4Bp5PunNzNw7FAHwQXdrP21VCYhfdn4m5 qWVbMPFMSqvOx8KRK/4OGXFRV1KJUrSdlV1zWJZ5B0qgk/IR0+Wkr23bNmaBZznj2HBN3xPeQmI etT3GpHY9LHVRVJ27jUmdJQ3d7OgSjLPDHc/ZLUdGqxpZtGDvIAkeGLKtdmHoULRK+k9MtTCSyR KlXegHbTQWRNTdEwhJFLswEHBaFGnRiJ2eitPy81ToJvlhig9oIUc6yi/fEIk9cjZYtyadqlfIC RLNYaLuE11pcanjjhZjgKCOlvdkSWdg4KGmvec6dQHwdOM+q2soodOOR46qKKXBGHfVqVEux/U/ cQgxawPK1BKmbUM3v+wpDj57XAnIrYSHbFiqZJrtypwVgB3qOMXqsyl5eAlhsn11nazm0qn6tig WKTdZLCrybWA9b/47Vys87GWSt2FyNHWdX76fN/vbAKPLy/ X-Received: by 2002:a05:6000:2403:b0:452:f89e:9edb with SMTP id ffacd0b85a97d-452f89e9fabmr8810436f8f.0.1778224346847; Fri, 08 May 2026 00:12:26 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.26 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:26 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 23/52] gsettings-desktop-schemas: upgrade 50.0 -> 50.1 Date: Fri, 8 May 2026 09:11:16 +0200 Message-ID: <4cf21a256ab5b6efc04edf6e929df808238ee485.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:29 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236665 From: Wang Mingyu Changelog[0] 50.0 -> 50.1: * Update Serbian translation * Update French translation * Update German translation * Update Polish translation * Update Polish translation * Update French translation [0]: https://gitlab.gnome.org/GNOME/gsettings-desktop-schemas/-/compare/50.0...50.1?from_project_id=1669 Signed-off-by: Wang Mingyu Signed-off-by: Mathieu Dubois-Briand (cherry picked from commit a63907b11bb23105ed2b5086489398ce65f41c46) [YC: added changelog] Signed-off-by: Yoann Congal --- ...esktop-schemas_50.0.bb => gsettings-desktop-schemas_50.1.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-gnome/gsettings-desktop-schemas/{gsettings-desktop-schemas_50.0.bb => gsettings-desktop-schemas_50.1.bb} (84%) diff --git a/meta/recipes-gnome/gsettings-desktop-schemas/gsettings-desktop-schemas_50.0.bb b/meta/recipes-gnome/gsettings-desktop-schemas/gsettings-desktop-schemas_50.1.bb similarity index 84% rename from meta/recipes-gnome/gsettings-desktop-schemas/gsettings-desktop-schemas_50.0.bb rename to meta/recipes-gnome/gsettings-desktop-schemas/gsettings-desktop-schemas_50.1.bb index 5fda20c6c37..1edb548ad6e 100644 --- a/meta/recipes-gnome/gsettings-desktop-schemas/gsettings-desktop-schemas_50.0.bb +++ b/meta/recipes-gnome/gsettings-desktop-schemas/gsettings-desktop-schemas_50.1.bb @@ -11,4 +11,4 @@ DEPENDS = "glib-2.0" inherit gnomebase gsettings gobject-introspection gettext -SRC_URI[archive.sha256sum] = "358f07cb253727650e132805df3c69f7bf90448040bce171b6f6f2cb1b9c37ef" +SRC_URI[archive.sha256sum] = "0a2aa25082672585d16fcdab61c7b0e33f035fb87476505c794f29565afa485b" From patchwork Fri May 8 07:11:17 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87709 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id C151ECD37AC for ; Fri, 8 May 2026 07:12:39 +0000 (UTC) Received: from mail-wr1-f45.google.com (mail-wr1-f45.google.com [209.85.221.45]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.8237.1778224350001157924 for ; Fri, 08 May 2026 00:12:30 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=sL4vTUFe; spf=pass (domain: smile.fr, ip: 209.85.221.45, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f45.google.com with SMTP id ffacd0b85a97d-44509921fbcso891884f8f.3 for ; Fri, 08 May 2026 00:12:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224348; x=1778829148; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=iUnuLVnmzVfJIJZkedIW89ARFRRG+q7lAXES07DMjCM=; b=sL4vTUFeV96NYIRl58PWtqyw26Q0c/B4/XKjyohSEZVReQhBjugztrU/h14Oe+VX+I Cow21FjhcrKkjqIUqOZ2Wn2yEWVYhWSgcivpdnqFmTYEs2OcMZ6V/J9ntdQpPixog2H0 WYYwjbPqtpOB3VGF48lkjp9cAs5Ko7JQlqboM= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224348; x=1778829148; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=iUnuLVnmzVfJIJZkedIW89ARFRRG+q7lAXES07DMjCM=; b=pK+O63UJmR9ocit3y1j9y28yv40vTX1BUY2wasjGCsuHSgEjX5+P7LGeBQvLg/5h/y b/gs963P94+oY2vSnkfMNXrYNtpG5g5nRGfXA6wWQ50+ODjf5fkF21Pe+BrGlj+V1p7T lslfwdw7Gj6e/r9L/GFZDjIW655euO/LSy7pXzg6y8k/h3anYo4j6BpNT3B5Agu81Xz4 rpmtA98wi/nxMGKN4DAXkgsKGX9l7eqlJoraXnuTeq+i0ioARHoFMpSqxdjpPa0kBU0r PwVHZ++uGWK4O6A3vrYtuELrACk838bBzxl6kqC5tJ82T8o0U72ix1c04dT2lnFmJbVA /JqA== X-Gm-Message-State: AOJu0YyqRblEYkKOE6qvydxzS2RdL9P+wuygkOoJrkkPTVBA36UTYS/v 25/MZ+/Tgxa+JnYaY4YiSjRPiiYPv5GAliDrYU/cygz2vM8A+jICGGWacp22gMCl+ow22/A5Dqy JvAUUpDM= X-Gm-Gg: Acq92OEymKvLQpDm5w7MbAg7yi3oYkErIpSpTImOP0uq9hSPQ4iDFzgFKP7DhWQqOH0 PPIcc0t7k4vRMdDdjbY161XVZra6xMukdjCtRzXyOKn0zo4SLsaLBGSm8DMD8/wHHeSDyo7hgTT FFz1QfC5ubbA70FQbTB0N6zEfq6LfnZUk0kYCCnxapTbZIvww58dPs8YtKgPN8Bg2WYm/N4adIY WPsL0bt6dC06vDmISCiMnLelkaR1yW5E0WgZN4XXxt7iDn2hCrTOJw0U+5l4JTdxVwybJ6V5ig0 r0edk0lkC2rQ6Fwh+9ppA+fHjE2VFQxlrRZ8w7bZYesdG00JfpXZntnYM5ybTNabXdau/pS3cWa Xb4z2qhPgzxIbXEKDH7nV/LGuFMt+8q1oy18j+CUhcGr+UE6RqDNjonCVRqweh4Huok0D7XlvE6 Mz8FOlXtrGMoU2QtGvrB7XEyFIqAK40IMhHsav8YHRf1JwyDWLFKitvwf4U6lZzKaMd9v0zhyul wFO90uQLJu2ZcE52mR6ukG95LY= X-Received: by 2002:a05:6000:3107:b0:44a:2cb3:b633 with SMTP id ffacd0b85a97d-4515b5240dbmr18176832f8f.12.1778224347988; Fri, 08 May 2026 00:12:27 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.27 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:27 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 24/52] gtk+3: upgrade 3.24.51 -> 3.24.52 Date: Fri, 8 May 2026 09:11:17 +0200 Message-ID: <61187cff91740a4faaf8b2a1252a7fa2229bb7cd.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:39 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236666 From: Wang Mingyu * Bugs fixed: - #6306 [GTK3] Zlib required when broadway is enabled. - #7796 [GTK 3] Invalid a11y events when calling `gtk_tree_view_set_cursor` on an unfocused GtkTreeView - #7976 Firefox crashes at gdk_wayland_drag_context_manage_dnd() when missing toplevel wl_surface - #8103 gtk3 refresh_rate calculation overflows on 32-bit targets - #8114 Images for recolored icons are constantly being reloaded - GNOME/gimp#14901 Wild strobing in multi window mode - GNOME/gimp#15480 GIMP does not focus on dialogue boxes on Mac - !7332 quartz: add automagic uti<->mime conversion for clipboard - !8216 Fix position of child tooltips in GTK3 custom windows - !9005 a11y: Don't send focus-related events for unfocused treeview - !9012 quartz: gtkwindow - fix windows fighting focus - !9022 gtkmenu: Await more motion events before deactivating on release - !9044 wayland: Handle XKB initialization failures gracefully - !9067 gdk/win32: Add missing EGL conditional compilation guard - !9098 gdk: do not run gdk_wayland_window_export_handle() callback when window is already destroyed. - !9119 Declare an explicit dependency on zlib when broadway is enabled - !9141 [GTK 3] wayland: Try to open the display even if XDG_RUNTIME_DIR is unset - !9155 [gtk3] emoji: Update data to CLDR 48 - !9214 display/wayland: Gracefully handle dispose being called twice - !9284 gdk/wayland: Map stylus buttons for BTN_BACK and BTN_FORWARD (Peter Hutterer) - !9322 [Quartz] Fix dialog keyboard focus while preventing focus fighting - !9344 Fix a couple of leaks - !9394 gdk/wayland: Map stylus buttons for BTN_BACK and BTN_FORWARD - !9397 wayland: Avoid a crash - !9600 Replace outdated freedesktop.org Window Manager spec links - !9676 x11: fix overflow in refresh_rate calculation on 32-bit systems - !9706 cssimage: Store and reuse icon info for recolored images - !9707 wayland: Fix uninitialized value when no cursor - !9708 fontchooser: Fix signedness of axes count - !9709 fontchooser: Remove const on float return values - !9710 print: Remove unused variable Signed-off-by: Wang Mingyu Signed-off-by: Mathieu Dubois-Briand (cherry picked from commit 015d6e1565effccabc427b75912c114216870cef) Signed-off-by: Yoann Congal --- meta/recipes-gnome/gtk+/{gtk+3_3.24.51.bb => gtk+3_3.24.52.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-gnome/gtk+/{gtk+3_3.24.51.bb => gtk+3_3.24.52.bb} (98%) diff --git a/meta/recipes-gnome/gtk+/gtk+3_3.24.51.bb b/meta/recipes-gnome/gtk+/gtk+3_3.24.52.bb similarity index 98% rename from meta/recipes-gnome/gtk+/gtk+3_3.24.51.bb rename to meta/recipes-gnome/gtk+/gtk+3_3.24.52.bb index 51a293c1d8e..1fcc08443d9 100644 --- a/meta/recipes-gnome/gtk+/gtk+3_3.24.51.bb +++ b/meta/recipes-gnome/gtk+/gtk+3_3.24.52.bb @@ -22,7 +22,7 @@ inherit gettext gnomebase gtk-doc update-alternatives gtk-immodules-cache gsetti SRC_URI += "\ file://opengl.patch \ " -SRC_URI[archive.sha256sum] = "0013877c6bd23c2dbe42ad7c70a053d0e449be66736574e37867c49c5f905a4f" +SRC_URI[archive.sha256sum] = "80931fa472a77b9a164f6740e3c0b444fac6770054632d35a7ff9d679e5e7b9f" BBCLASSEXTEND = "native nativesdk" From patchwork Fri May 8 07:11:18 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87714 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 8EB7ACD37B8 for ; Fri, 8 May 2026 07:12:40 +0000 (UTC) Received: from mail-wr1-f51.google.com (mail-wr1-f51.google.com [209.85.221.51]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.8167.1778224350633879179 for ; Fri, 08 May 2026 00:12:30 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=ATPN4aua; spf=pass (domain: smile.fr, ip: 209.85.221.51, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f51.google.com with SMTP id ffacd0b85a97d-44b330c5cc6so1186683f8f.1 for ; Fri, 08 May 2026 00:12:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224349; x=1778829149; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=q5xkKxCL3Jzsz3b6I3G9J3CF3bgTKUICtGA4MgL7tWk=; b=ATPN4auaHbLlfhwUcbXmbu4SA3gT5MAgj1VZ4KUChPsb3/xBta3z5kuMpjh8YGH5wl AhU1uhSD65yElkQv0yi0BLjXMtbb1hThg0ewWdQ+Vd/EnyyjuoF3LVhxHldRKyz+S2LB Sgk7223JiAGvO/lJLPUgdLM4gHvI82SA6Bmnk= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224349; x=1778829149; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=q5xkKxCL3Jzsz3b6I3G9J3CF3bgTKUICtGA4MgL7tWk=; b=RmM9rkfo025CKV+GiWda8ico5XqOz2/bZBUy37Hgam/5AXE/9OuH/4lvo1QuJl0Ezk U6QJpKDcDgUfkGIs5KWAAAp5HPZotzU7cPoMHhQFi4JNhEZjNzMaTfHAH1Vp/GlmXNkk R0+1MPhDkJPlat+fYF26PHKic2Dp0VnFsrWwD6qiIaTntO4Y57REKRam7Rs2uAseBZnN FDCoSMALFY/e2KRT8apVjJ75oUNQoA3k2QpbKktQtijR9BUp+CCXyR9Eo6LZ6Zwu11KI KMtmq6Lcwp0C8mHgHDeFHEWIgCpWarKurvfWuE2z+ZjBf554fp2VcRmE07twsP366nNU mUnA== X-Gm-Message-State: AOJu0YzVt66V/4GCrInyrWWHSUhSrZ2XLZE7XN+1kdsKb6F4hTZp6k87 NeG3EHuj8XYwl9hfkBJnO6czCkTbQg8wHBiHvMlzZnrxYvmfhjneive/0X9Jcktds3SDF8g6OdH ZeUBmxXM= X-Gm-Gg: Acq92OF/wNTF3GrUkrQsEKyyYrJr5b/9+YeaJoIWVgwuZDYe6twT1STOsbcDoIUkzvv 1psb0E4D11oV0U13joy/zR/o9zFvfmF4nDqRXUuEtjCp2JSBVBQeppe5PT6vZou3euio3mZnCAl W1+BrxcGDwPAg+3PwnYZ13Kb+rgjrCv1AM/BSmRYx9QbJwI1GksGl+/DFP8TgXo4h5bQrT2GRKZ DXomCU/v0L2oQDFSrJQcVzBGaKJ53alXrABZDvPuzX61T4htCbsfKOGAbu47SYidEHXtpxg8eEJ x62eh3k/tNGTx/ncWnWrL4wuoysdHzfGkO5XNrCL+pSZ2mWMdz11ETi4kECRtun/Ds/e9np6JMB PgHgHsI05ee/Px/wHlNt2LSiIwIQlwXKeUXV9wR6S9s86R+/wO+rRVXuWbStTNSfvbEwluDaQpM /rYS1UCh4jL0/wnsaHU/F5GD1Pe3QWWCM8r7WLw6nNrqgF5h17Wnh3bME/l9f/MvImATGamTp4P r1Zp2y1CcDRODL5sWUqofA+B84= X-Received: by 2002:a05:6000:2386:b0:43f:e938:1e67 with SMTP id ffacd0b85a97d-4515d99fff7mr17756950f8f.38.1778224348626; Fri, 08 May 2026 00:12:28 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.28 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:28 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 25/52] gtk4: upgrade 4.22.1 -> 4.22.2 Date: Fri, 8 May 2026 09:11:18 +0200 Message-ID: X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:40 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236667 From: Wang Mingyu Bugs fixed: - #8117 Docs for the new SVG parser? - #8119 Wrong colors used for fallback symbolic icons containing classes - #8125 svg: Animating hrefs does not work - !9590 vulkan: fix GDK_VULKAN_FEATURE_SWAPCHAIN_MAINTENANCE check - !9660 Various Vulkan fixes - !9665 tests: fix libtestutils build under Windows. - !9667 Update Serbian translation - !9678 testsuite: Add dmabuf compare tests to needs-udmabuf suite - !9681 dmabuf: Support dmabufs with fewer fds than planes - !9682 Update Galician translation - !9701 Update Turkish translation - !9704 Update Catalan translation - !9711 Load less icons as symbolics - !9719 Fix traditional symbolic fallback - !9736 svg: Fix invalidation - !9739 Assorted backports Signed-off-by: Wang Mingyu Signed-off-by: Mathieu Dubois-Briand (cherry picked from commit 4d325cb65a0a62af5a34872485dcde5a07765659) Signed-off-by: Yoann Congal --- meta/recipes-gnome/gtk+/{gtk4_4.22.1.bb => gtk4_4.22.2.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-gnome/gtk+/{gtk4_4.22.1.bb => gtk4_4.22.2.bb} (97%) diff --git a/meta/recipes-gnome/gtk+/gtk4_4.22.1.bb b/meta/recipes-gnome/gtk+/gtk4_4.22.2.bb similarity index 97% rename from meta/recipes-gnome/gtk+/gtk4_4.22.1.bb rename to meta/recipes-gnome/gtk+/gtk4_4.22.2.bb index bbe595c376a..f2cef8d13ac 100644 --- a/meta/recipes-gnome/gtk+/gtk4_4.22.1.bb +++ b/meta/recipes-gnome/gtk+/gtk4_4.22.2.bb @@ -33,7 +33,7 @@ LIC_FILES_CHKSUM = " \ file://tests/testgtk.c;endline=25;md5=49d06770681b8322466b52ed19d29fb2 \ " -SRC_URI[archive.sha256sum] = "cd7b5a9c41127da6fb321c5a842ad73c62e6996f9ce3f1960ca509f6559d55fc" +SRC_URI[archive.sha256sum] = "b1c987370a0c30780cde351bdbee02eef816728f1c1c2ec7c8093281c0709ee8" S = "${UNPACKDIR}/${GNOMEBN}-${PV}" From patchwork Fri May 8 07:11:19 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87712 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 73A11CD37B6 for ; Fri, 8 May 2026 07:12:40 +0000 (UTC) Received: from mail-wr1-f54.google.com (mail-wr1-f54.google.com [209.85.221.54]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.8238.1778224351425873885 for ; Fri, 08 May 2026 00:12:31 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=mgJZ0BEC; spf=pass (domain: smile.fr, ip: 209.85.221.54, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f54.google.com with SMTP id ffacd0b85a97d-44a5174670eso1015321f8f.1 for ; Fri, 08 May 2026 00:12:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224349; x=1778829149; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=OrwReiX+QIi8oPJeTptbUWL/wxK08lFg0+43UTtg/6k=; b=mgJZ0BECOdl+GggjB/lbhKTyOcB7Hi5bBqdMhENzg1qgHDR4VCrDf/2NVrDxUdDHnk miwba+8lXTStEBqSvIZFu+nAR/JzDNAvfsrXNE7BM0alNa0TWATrx0B9d8gkTmJk8pLX Dspl5D1hk58HyOXC1xkebcKCPe+tfoTMlcA3g= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224349; x=1778829149; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=OrwReiX+QIi8oPJeTptbUWL/wxK08lFg0+43UTtg/6k=; b=OTRNh25SJNhZqXGDB0yxNA+Rc/6Irh9vKptFC7u5pSLz4mQ/Dc/fwOh8/sBut9G1DG M6LH7G4L1qhJbiDIjth25lm89hgK6zbLuATw/25slIhxkkf1TmfvPafNXnGXNxGUbLvW Gx5jukrt8II5qlvGPFpPBjD9BTIOAKVywd8BhEf8Hr6jjtkfszcsm1dtw7K+nvvCY9hk 5PsKH8BMRrNc9Fl+GhxoxGSNQ7I6FRWaFscoB6a6NPRGGxBisUeSzvJ5Mxny0aNHo+12 qsQUanVcZx45WNgABh7hHIRluf2FXW0C+ef5bHyIslH5xmAtJQqAQmnkOrj/JRvJe/nU bXYg== X-Gm-Message-State: AOJu0Yz1Skw7BXOLnlQkl+NalyU3XDBUDB7vprVU81TNEZZByH1TgnA8 dzbpYGn7SbU3NwSphShxc6x0bj2ahjIJbcafBNkZU+VvuuelJIFZJvlaZscEI4rYCNfMqt6WN6i nYYlZHvQ= X-Gm-Gg: Acq92OFJo2h3my+kFRuv79i33PUUcsB2m+peEoNuidU1Rizr+Wc2705EqGputb7kk3a f5Oh/skXtt/85pwQUcqB6THnjXnL+3qeyXCO/OT5+ACi/UfsUkNhHCdk7j1rCBktwjIFXFuVVGL H6joL0fP3xwyyfIMajdI4jTP5mMGaO0eCNdTNoRYs5X9UlaaglVlrZKKEZ92heJRIKammheiGFG x40dts06QHK3YrqUC/b0zj9tjxoKVZzLaOUStBhMWwbblpNrP0i07MBXhHE4xhzhb6Q182e6NLK bZOSgUVlJhwB6qRK7fhNRXNKgqmWAMUW0xBdfSIlRkcqFCxk10usvGo8y1ey95A7q9qkGMoid35 LbMhOvDRw99e7EnGgwn6pcSGoc04zf3CeYRyChcGJqmvW6rrXzHc3XWER0GgWpU44p2XtNxC8i6 kAqjDH8K5NzGc/LzV21ft/RyFWk5w4a0oIVlcGcZsLZhrxWy74M15voWUECUqRvK7NV92Lv+qJy 1tdoO6ROhrPxkXPzlQtbEEmrUo= X-Received: by 2002:a05:6000:4188:b0:452:79c0:f7f1 with SMTP id ffacd0b85a97d-45279c0f880mr8715969f8f.0.1778224349231; Fri, 08 May 2026 00:12:29 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.28 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:28 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 26/52] hwdata: upgrade 0.405 -> 0.406 Date: Fri, 8 May 2026 09:11:19 +0200 Message-ID: <483df8aaac5e2c4019e68280fe08547fe8287ae9.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:40 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236668 From: Wang Mingyu Signed-off-by: Wang Mingyu Signed-off-by: Mathieu Dubois-Briand (cherry picked from commit be9612dbde517e78e18dc886b32d0afbcdba2e4f) Signed-off-by: Yoann Congal --- .../recipes-support/hwdata/{hwdata_0.405.bb => hwdata_0.406.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-support/hwdata/{hwdata_0.405.bb => hwdata_0.406.bb} (93%) diff --git a/meta/recipes-support/hwdata/hwdata_0.405.bb b/meta/recipes-support/hwdata/hwdata_0.406.bb similarity index 93% rename from meta/recipes-support/hwdata/hwdata_0.405.bb rename to meta/recipes-support/hwdata/hwdata_0.406.bb index 7247e9f3658..602ab7c9e21 100644 --- a/meta/recipes-support/hwdata/hwdata_0.405.bb +++ b/meta/recipes-support/hwdata/hwdata_0.406.bb @@ -8,7 +8,7 @@ LICENSE = "GPL-2.0-or-later | X11" LIC_FILES_CHKSUM = "file://LICENSE;md5=1556547711e8246992b999edd9445a57" SRC_URI = "git://github.com/vcrhonek/${BPN}.git;branch=master;protocol=https;tag=v${PV}" -SRCREV = "be46d7186e918e62eb75de399e800145a781c8db" +SRCREV = "9ae3b9da5cbb93eed30f812aa7edb4b9ad3e3868" inherit allarch From patchwork Fri May 8 07:11:20 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87717 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 69720CD37B4 for ; Fri, 8 May 2026 07:12:40 +0000 (UTC) Received: from mail-wr1-f41.google.com (mail-wr1-f41.google.com [209.85.221.41]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.8168.1778224352373965381 for ; Fri, 08 May 2026 00:12:32 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=rsIWzCBl; spf=pass (domain: smile.fr, ip: 209.85.221.41, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f41.google.com with SMTP id ffacd0b85a97d-45297094718so1336190f8f.3 for ; Fri, 08 May 2026 00:12:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224350; x=1778829150; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=XmusIbuVtyK2g/VZwPEBbn9xybBKuSt1cL9ueULP+nM=; b=rsIWzCBlbOu/6otZXnoNmbvOyEx8CZbImMspyWgjzdhV375OHwB20bQs+WhLqOL7GN 2anQ4nqCviZ9jTjWvo80k0Vx3TbPF8/eRe1t9T5cywaA9nvxK90SCgQ3ftExnpnrV9Rc RQGO8TSaZ9updPbUniAYW7DIJYOWX1Z7X3LnA= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224350; x=1778829150; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=XmusIbuVtyK2g/VZwPEBbn9xybBKuSt1cL9ueULP+nM=; b=MqvuoYWzJhfXZsMraPQGafow3yE5jmFXjdzIcnPeYM6OwRJlSTtAgWRfGVqvh5/rfy KgR1IIUnl48HAi4PJ+DgQkZJSyNjqjZf9pNtEFSXmEL0001ZARgujOwp+in8iRWtd/U8 UwE7JHXXh/8ZXMuMoX3Gk10C0U9VrWJ5fmBpD3yFs5BLprdSz02569eiDVNg+oz5i3wL 0poGcPxzrZj8BdJb2FAvmq8pX4eAmp3cMv+NWoxmVBe3Kkkpc8fwbiFyf/G9WPg6nYCc DzJQqjOjJ01zk2UcsIK8ehinHNlb+I1SRunwTe5xobSJwNPmTTLkdnoaj4tG/XZhy07g DweA== X-Gm-Message-State: AOJu0Yyaxv5ua/y6G2cSGbtyW/Hk+KJthI5OtvpaVoCRq/iXmWFZDKW2 PzZ6siMIfzum6zeGyB4hHJRStnTWREhu2ueqOZcHi3COSKDDdpCe0TZmFxtQjjzGa5k93PZvW4c +EmmFlvQ= X-Gm-Gg: Acq92OE6MEsKSX+r5gcwHr0aMj8/KLSYypcCqbem+X0Ncx1xchDQhFhTJ9zjqsYcZCL F3xiEjfnNVUcQTGqM3s6Vs9m/xAfD9WnCM8PJVZ8kuppEGtklvN+Vkw7LJtiisfSBVx4kD5bWMc TIdW50PHff442hbnt98lJaNR9L520oIT8+L090P7s0g0Jpt3OdAWCfA7bUP/gbRAeRrGs3k7T3X HjHZwqLZFfupJqDhs1yeQeWKpX4u24L3LF/VDNKmks9Qs2G7x4bxi59jPLaqMLRkrrI/nRIhKem XnDFhUF39BwakfxweRcPtACxRokrwN+t3AznodaNzTnkND4w7fpsPyE4TxaNFcRhnjVRxGXVexA QCKgAdZrGc5GSobdvZmw4KT5/OMxyNtVvCoYHJMYeMBV0ScQRJVzGzBSLQ/RDIHy6PwHl1o8pnY t8KHKBUeeTrUoUvGMDE1m4xC6nMVjNdiiTj1/ttp0nwWJTQzhLZ0YryfJ9CioOzvBmNmnr4sYCu nZ401OcN4KiONkW4MQ2cp0a4V7i/0OHKP1RpQ== X-Received: by 2002:a5d:64c5:0:b0:43d:70de:1c70 with SMTP id ffacd0b85a97d-4515d5c54cbmr16814540f8f.32.1778224350047; Fri, 08 May 2026 00:12:30 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.29 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:29 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 27/52] avahi: Fix CVE-2026-34933 Date: Fri, 8 May 2026 09:11:20 +0200 Message-ID: <157d78fa9458829bf6384d253c00791532f8def1.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:40 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236669 From: Vijay Anusuri Pick patch according to [1] [1] https://security-tracker.debian.org/tracker/CVE-2026-34933 [2] https://github.com/avahi/avahi/pull/891 [3] https://nvd.nist.gov/vuln/detail/CVE-2026-34933 Signed-off-by: Vijay Anusuri Signed-off-by: Mathieu Dubois-Briand (cherry picked from commit 4ef89e64135d07cb975e6232f4eaa18c4771de2f) Signed-off-by: Yoann Congal --- meta/recipes-connectivity/avahi/avahi_0.8.bb | 2 + .../avahi/files/CVE-2026-34933-1.patch | 108 ++++++++++++++++++ .../avahi/files/CVE-2026-34933-2.patch | 96 ++++++++++++++++ 3 files changed, 206 insertions(+) create mode 100644 meta/recipes-connectivity/avahi/files/CVE-2026-34933-1.patch create mode 100644 meta/recipes-connectivity/avahi/files/CVE-2026-34933-2.patch diff --git a/meta/recipes-connectivity/avahi/avahi_0.8.bb b/meta/recipes-connectivity/avahi/avahi_0.8.bb index 931946646ef..0042c3c2e3d 100644 --- a/meta/recipes-connectivity/avahi/avahi_0.8.bb +++ b/meta/recipes-connectivity/avahi/avahi_0.8.bb @@ -41,6 +41,8 @@ SRC_URI = "${GITHUB_BASE_URI}/download/v${PV}/avahi-${PV}.tar.gz \ file://CVE-2026-24401.patch \ file://CVE-2025-68468.patch \ file://CVE-2025-68471.patch \ + file://CVE-2026-34933-1.patch \ + file://CVE-2026-34933-2.patch \ " GITHUB_BASE_URI = "https://github.com/avahi/avahi/releases/" diff --git a/meta/recipes-connectivity/avahi/files/CVE-2026-34933-1.patch b/meta/recipes-connectivity/avahi/files/CVE-2026-34933-1.patch new file mode 100644 index 00000000000..208345a3258 --- /dev/null +++ b/meta/recipes-connectivity/avahi/files/CVE-2026-34933-1.patch @@ -0,0 +1,108 @@ +From 0be89b6bb5c3983837b5e0febcbbbf452ecf7675 Mon Sep 17 00:00:00 2001 +From: Evgeny Vereshchagin +Date: Wed, 1 Apr 2026 05:31:58 +0000 +Subject: [PATCH] core: refuse to accept publish flags where both wide_area and + multicast are set + +It fixes a bug where it was possible for unprivileged local users to +crash avahi-daemon via D-Bus by calling EntryGroup methods accepting +flags and passing both AVAHI_PUBLISH_USE_WIDE_AREA and +AVAHI_PUBLISH_USE_MULTICAST there. For example when AddRecord was +invoked like that avahi-daemon crashed with +``` +dbus-entry-group.c: interface=org.freedesktop.Avahi.EntryGroup, path=/Client0/EntryGroup1, member=AddRecord +avahi-daemon: entry.c:57: transport_flags_from_domain: Assertion `!((*flags & AVAHI_PUBLISH_USE_MULTICAST) && (*flags & AVAHI_PUBLISH_USE_WIDE_AREA))' failed. +==84944== +==84944== Process terminating with default action of signal 6 (SIGABRT) +==84944== at 0x4B353BC: __pthread_kill_implementation (pthread_kill.c:44) +==84944== by 0x4ADE941: raise (raise.c:26) +==84944== by 0x4AC64AB: abort (abort.c:77) +==84944== by 0x4AC641F: __assert_fail_base.cold (assert.c:118) +==84944== by 0x48A9404: transport_flags_from_domain (entry.c:57) +==84944== by 0x48A9F8F: server_add_internal (entry.c:224) +==84944== by 0x48AA49F: avahi_server_add (entry.c:324) +==84944== by 0x401A670: avahi_dbus_msg_entry_group_impl (dbus-entry-group.c:348) +==84944== by 0x4A70741: ??? (in /usr/lib/x86_64-linux-gnu/libdbus-1.so.3.38.3) +==84944== by 0x4A5FB22: dbus_connection_dispatch (in /usr/lib/x86_64-linux-gnu/libdbus-1.so.3.38.3) +==84944== by 0x401D01D: dispatch_timeout_callback (dbus-watch-glue.c:105) +==84944== by 0x488E3AE: timeout_callback (simple-watch.c:447) +==84944== +``` +It's a follow-up to fbce111b069aa1e4c701ed37ee1d9f6d6cefaac5 where +those flags were introduced and consistent with the other places +where wide_area/multicast flags are used. + +It was discovered by +Guillaume Meunier - Head of Vulnerability Operations Center France - Orange Cyberdefense + +https://github.com/avahi/avahi/security/advisories/GHSA-w65r-6gxh-vhvc + +CVE-2026-34933 + +Upstream-Status: Backport [https://github.com/avahi/avahi/commit/0be89b6bb5c3983837b5e0febcbbbf452ecf7675] +CVE: CVE-2026-34933 +Signed-off-by: Vijay Anusuri +--- + avahi-core/entry.c | 7 +++++++ + 1 file changed, 7 insertions(+) + +diff --git a/avahi-core/entry.c b/avahi-core/entry.c +index 0d862133d..06eb12076 100644 +--- a/avahi-core/entry.c ++++ b/avahi-core/entry.c +@@ -207,6 +207,7 @@ static AvahiEntry * server_add_internal( + AVAHI_PUBLISH_UPDATE| + AVAHI_PUBLISH_USE_WIDE_AREA| + AVAHI_PUBLISH_USE_MULTICAST), AVAHI_ERR_INVALID_FLAGS); ++ AVAHI_CHECK_VALIDITY_RETURN_NULL(s, !(flags & AVAHI_PUBLISH_USE_WIDE_AREA) || !(flags & AVAHI_PUBLISH_USE_MULTICAST), AVAHI_ERR_INVALID_FLAGS); + AVAHI_CHECK_VALIDITY_RETURN_NULL(s, avahi_is_valid_domain_name(r->key->name), AVAHI_ERR_INVALID_HOST_NAME); + AVAHI_CHECK_VALIDITY_RETURN_NULL(s, r->ttl != 0, AVAHI_ERR_INVALID_TTL); + AVAHI_CHECK_VALIDITY_RETURN_NULL(s, !avahi_key_is_pattern(r->key), AVAHI_ERR_IS_PATTERN); +@@ -454,6 +455,7 @@ int avahi_server_add_address( + AVAHI_PUBLISH_UPDATE| + AVAHI_PUBLISH_USE_WIDE_AREA| + AVAHI_PUBLISH_USE_MULTICAST), AVAHI_ERR_INVALID_FLAGS); ++ AVAHI_CHECK_VALIDITY(s, !(flags & AVAHI_PUBLISH_USE_WIDE_AREA) || !(flags & AVAHI_PUBLISH_USE_MULTICAST), AVAHI_ERR_INVALID_FLAGS); + AVAHI_CHECK_VALIDITY(s, !name || avahi_is_valid_fqdn(name), AVAHI_ERR_INVALID_HOST_NAME); + + /* Prepare the host naem */ +@@ -595,6 +597,7 @@ static int server_add_service_strlst_nocopy( + AVAHI_PUBLISH_UPDATE| + AVAHI_PUBLISH_USE_WIDE_AREA| + AVAHI_PUBLISH_USE_MULTICAST), AVAHI_ERR_INVALID_FLAGS); ++ AVAHI_CHECK_VALIDITY_SET_RET_GOTO_FAIL(s, !(flags & AVAHI_PUBLISH_USE_WIDE_AREA) || !(flags & AVAHI_PUBLISH_USE_MULTICAST), AVAHI_ERR_INVALID_FLAGS); + AVAHI_CHECK_VALIDITY_SET_RET_GOTO_FAIL(s, avahi_is_valid_service_name(name), AVAHI_ERR_INVALID_SERVICE_NAME); + AVAHI_CHECK_VALIDITY_SET_RET_GOTO_FAIL(s, avahi_is_valid_service_type_strict(type), AVAHI_ERR_INVALID_SERVICE_TYPE); + AVAHI_CHECK_VALIDITY_SET_RET_GOTO_FAIL(s, !domain || avahi_is_valid_domain_name(domain), AVAHI_ERR_INVALID_DOMAIN_NAME); +@@ -754,6 +757,7 @@ static int server_update_service_txt_strlst_nocopy( + AVAHI_PUBLISH_NO_COOKIE| + AVAHI_PUBLISH_USE_WIDE_AREA| + AVAHI_PUBLISH_USE_MULTICAST), AVAHI_ERR_INVALID_FLAGS); ++ AVAHI_CHECK_VALIDITY_SET_RET_GOTO_FAIL(s, !(flags & AVAHI_PUBLISH_USE_WIDE_AREA) || !(flags & AVAHI_PUBLISH_USE_MULTICAST), AVAHI_ERR_INVALID_FLAGS); + AVAHI_CHECK_VALIDITY_SET_RET_GOTO_FAIL(s, avahi_is_valid_service_name(name), AVAHI_ERR_INVALID_SERVICE_NAME); + AVAHI_CHECK_VALIDITY_SET_RET_GOTO_FAIL(s, avahi_is_valid_service_type_strict(type), AVAHI_ERR_INVALID_SERVICE_TYPE); + AVAHI_CHECK_VALIDITY_SET_RET_GOTO_FAIL(s, !domain || avahi_is_valid_domain_name(domain), AVAHI_ERR_INVALID_DOMAIN_NAME); +@@ -843,6 +847,7 @@ int avahi_server_add_service_subtype( + AVAHI_CHECK_VALIDITY_SET_RET_GOTO_FAIL(s, AVAHI_IF_VALID(interface), AVAHI_ERR_INVALID_INTERFACE); + AVAHI_CHECK_VALIDITY_SET_RET_GOTO_FAIL(s, AVAHI_PROTO_VALID(protocol), AVAHI_ERR_INVALID_PROTOCOL); + AVAHI_CHECK_VALIDITY_SET_RET_GOTO_FAIL(s, AVAHI_FLAGS_VALID(flags, AVAHI_PUBLISH_USE_MULTICAST|AVAHI_PUBLISH_USE_WIDE_AREA), AVAHI_ERR_INVALID_FLAGS); ++ AVAHI_CHECK_VALIDITY_SET_RET_GOTO_FAIL(s, !(flags & AVAHI_PUBLISH_USE_WIDE_AREA) || !(flags & AVAHI_PUBLISH_USE_MULTICAST), AVAHI_ERR_INVALID_FLAGS); + AVAHI_CHECK_VALIDITY_SET_RET_GOTO_FAIL(s, avahi_is_valid_service_name(name), AVAHI_ERR_INVALID_SERVICE_NAME); + AVAHI_CHECK_VALIDITY_SET_RET_GOTO_FAIL(s, avahi_is_valid_service_type_strict(type), AVAHI_ERR_INVALID_SERVICE_TYPE); + AVAHI_CHECK_VALIDITY_SET_RET_GOTO_FAIL(s, !domain || avahi_is_valid_domain_name(domain), AVAHI_ERR_INVALID_DOMAIN_NAME); +@@ -910,6 +915,7 @@ static AvahiEntry *server_add_dns_server_name( + assert(name); + + AVAHI_CHECK_VALIDITY_RETURN_NULL(s, AVAHI_FLAGS_VALID(flags, AVAHI_PUBLISH_USE_WIDE_AREA|AVAHI_PUBLISH_USE_MULTICAST), AVAHI_ERR_INVALID_FLAGS); ++ AVAHI_CHECK_VALIDITY_RETURN_NULL(s, !(flags & AVAHI_PUBLISH_USE_WIDE_AREA) || !(flags & AVAHI_PUBLISH_USE_MULTICAST), AVAHI_ERR_INVALID_FLAGS); + AVAHI_CHECK_VALIDITY_RETURN_NULL(s, type == AVAHI_DNS_SERVER_UPDATE || type == AVAHI_DNS_SERVER_RESOLVE, AVAHI_ERR_INVALID_FLAGS); + AVAHI_CHECK_VALIDITY_RETURN_NULL(s, port != 0, AVAHI_ERR_INVALID_PORT); + AVAHI_CHECK_VALIDITY_RETURN_NULL(s, avahi_is_valid_fqdn(name), AVAHI_ERR_INVALID_HOST_NAME); +@@ -967,6 +973,7 @@ int avahi_server_add_dns_server_address( + AVAHI_CHECK_VALIDITY(s, AVAHI_IF_VALID(interface), AVAHI_ERR_INVALID_INTERFACE); + AVAHI_CHECK_VALIDITY(s, AVAHI_PROTO_VALID(protocol) && AVAHI_PROTO_VALID(address->proto), AVAHI_ERR_INVALID_PROTOCOL); + AVAHI_CHECK_VALIDITY(s, AVAHI_FLAGS_VALID(flags, AVAHI_PUBLISH_USE_MULTICAST|AVAHI_PUBLISH_USE_WIDE_AREA), AVAHI_ERR_INVALID_FLAGS); ++ AVAHI_CHECK_VALIDITY(s, !(flags & AVAHI_PUBLISH_USE_WIDE_AREA) || !(flags & AVAHI_PUBLISH_USE_MULTICAST), AVAHI_ERR_INVALID_FLAGS); + AVAHI_CHECK_VALIDITY(s, type == AVAHI_DNS_SERVER_UPDATE || type == AVAHI_DNS_SERVER_RESOLVE, AVAHI_ERR_INVALID_FLAGS); + AVAHI_CHECK_VALIDITY(s, port != 0, AVAHI_ERR_INVALID_PORT); + AVAHI_CHECK_VALIDITY(s, !domain || avahi_is_valid_domain_name(domain), AVAHI_ERR_INVALID_DOMAIN_NAME); diff --git a/meta/recipes-connectivity/avahi/files/CVE-2026-34933-2.patch b/meta/recipes-connectivity/avahi/files/CVE-2026-34933-2.patch new file mode 100644 index 00000000000..479d0d7e932 --- /dev/null +++ b/meta/recipes-connectivity/avahi/files/CVE-2026-34933-2.patch @@ -0,0 +1,96 @@ +From a93fdd980d2db5d453475c0aa2b39946bd6611bd Mon Sep 17 00:00:00 2001 +From: Evgeny Vereshchagin +Date: Wed, 1 Apr 2026 05:30:58 +0000 +Subject: [PATCH] tests: make sure AVAHI_PUBLISH_USE_WIDE_AREA is refused + +Upstream-Status: Backport [https://github.com/avahi/avahi/commit/a93fdd980d2db5d453475c0aa2b39946bd6611bd] +CVE: CVE-2026-34933 +Signed-off-by: Vijay Anusuri +--- + avahi-client/client-test.c | 25 +++++++++++++++++++++++++ + avahi-core/avahi-test.c | 12 +++++++++++- + 2 files changed, 36 insertions(+), 1 deletion(-) + +diff --git a/avahi-client/client-test.c b/avahi-client/client-test.c +index 9a015d7..c80e12f 100644 +--- a/avahi-client/client-test.c ++++ b/avahi-client/client-test.c +@@ -212,6 +212,28 @@ static void terminate(AVAHI_GCC_UNUSED AvahiTimeout *timeout, AVAHI_GCC_UNUSED v + avahi_simple_poll_quit(simple_poll); + } + ++static void test_refuse_publish_flags(AvahiEntryGroup *g, AvahiPublishFlags flags, int expected) { ++ AvahiAddress a; ++ AvahiStringList *l = NULL; ++ int r; ++ ++ r = avahi_entry_group_add_record(g, AVAHI_IF_UNSPEC, AVAHI_PROTO_UNSPEC, flags, "test.local", AVAHI_DNS_CLASS_IN, AVAHI_DNS_TYPE_CNAME, 120, "\0", 1); ++ assert(r == expected); ++ ++ avahi_address_parse("224.0.0.251", AVAHI_PROTO_UNSPEC, &a); ++ r = avahi_entry_group_add_address(g, AVAHI_IF_UNSPEC, AVAHI_PROTO_UNSPEC, flags, "test.local", &a); ++ assert(r == expected); ++ ++ r = avahi_entry_group_add_service_strlst(g, AVAHI_IF_UNSPEC, AVAHI_PROTO_UNSPEC, flags, "test", "_http._tcp", NULL, NULL, 80, l); ++ assert(r == expected); ++ ++ r = avahi_entry_group_update_service_txt_strlst(g, AVAHI_IF_UNSPEC, AVAHI_PROTO_UNSPEC, flags, "test", "_http._tcp", NULL, l); ++ assert(r == expected); ++ ++ r = avahi_entry_group_add_service_subtype(g, AVAHI_IF_UNSPEC, AVAHI_PROTO_UNSPEC, flags, "test", "_http._tcp", NULL, "_magic._sub._http._tcp"); ++ assert(r == expected); ++} ++ + int main (AVAHI_GCC_UNUSED int argc, AVAHI_GCC_UNUSED char *argv[]) { + AvahiClient *avahi; + AvahiEntryGroup *group, *group2; +@@ -275,6 +297,9 @@ int main (AVAHI_GCC_UNUSED int argc, AVAHI_GCC_UNUSED char *argv[]) { + error = avahi_entry_group_add_record (group, AVAHI_IF_UNSPEC, AVAHI_PROTO_UNSPEC, 0, "TestX", 0x01, 0x10, 120, "", 0); + assert(error != AVAHI_OK); + ++ test_refuse_publish_flags(group, AVAHI_PUBLISH_USE_WIDE_AREA, AVAHI_ERR_NOT_SUPPORTED); ++ test_refuse_publish_flags(group, AVAHI_PUBLISH_USE_WIDE_AREA|AVAHI_PUBLISH_USE_MULTICAST, AVAHI_ERR_INVALID_FLAGS); ++ + avahi_entry_group_commit (group); + + domain = avahi_domain_browser_new (avahi, AVAHI_IF_UNSPEC, AVAHI_PROTO_UNSPEC, NULL, AVAHI_DOMAIN_BROWSER_BROWSE, 0, avahi_domain_browser_callback, (char*) "omghai3u"); +diff --git a/avahi-core/avahi-test.c b/avahi-core/avahi-test.c +index 2a7872b..2bae82b 100644 +--- a/avahi-core/avahi-test.c ++++ b/avahi-core/avahi-test.c +@@ -30,6 +30,7 @@ + #include + #include + ++#include + #include + #include + #include +@@ -150,6 +151,7 @@ static void remove_entries(void) { + static void create_entries(int new_name) { + AvahiAddress a; + AvahiRecord *r; ++ int error; + + remove_entries(); + +@@ -181,7 +183,15 @@ static void create_entries(int new_name) { + goto fail; + } + +- if (avahi_server_add_dns_server_address(server, group, AVAHI_IF_UNSPEC, AVAHI_PROTO_UNSPEC, 0, NULL, AVAHI_DNS_SERVER_RESOLVE, avahi_address_parse("192.168.50.1", AVAHI_PROTO_UNSPEC, &a), 53) < 0) { ++ avahi_address_parse("192.168.50.1", AVAHI_PROTO_UNSPEC, &a); ++ ++ error = avahi_server_add_dns_server_address(server, group, AVAHI_IF_UNSPEC, AVAHI_PROTO_UNSPEC, AVAHI_PUBLISH_USE_WIDE_AREA, NULL, AVAHI_DNS_SERVER_RESOLVE, &a, 53); ++ assert(error == AVAHI_ERR_NOT_SUPPORTED); ++ ++ error = avahi_server_add_dns_server_address(server, group, AVAHI_IF_UNSPEC, AVAHI_PROTO_UNSPEC, AVAHI_PUBLISH_USE_WIDE_AREA|AVAHI_PUBLISH_USE_MULTICAST, NULL, AVAHI_DNS_SERVER_RESOLVE, &a, 53); ++ assert(error == AVAHI_ERR_INVALID_FLAGS); ++ ++ if (avahi_server_add_dns_server_address(server, group, AVAHI_IF_UNSPEC, AVAHI_PROTO_UNSPEC, 0, NULL, AVAHI_DNS_SERVER_RESOLVE, &a, 53) < 0) { + avahi_log_error("Failed to add new DNS Server address"); + goto fail; + } +-- +2.43.0 + From patchwork Fri May 8 07:11:21 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87716 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 48BB5CD37B3 for ; Fri, 8 May 2026 07:12:40 +0000 (UTC) Received: from mail-wr1-f43.google.com (mail-wr1-f43.google.com [209.85.221.43]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.8169.1778224353183258853 for ; Fri, 08 May 2026 00:12:33 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=pREZiAee; spf=pass (domain: smile.fr, ip: 209.85.221.43, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f43.google.com with SMTP id ffacd0b85a97d-444826c16ffso1480642f8f.1 for ; Fri, 08 May 2026 00:12:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224351; x=1778829151; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=Ma/3Xq8wBkjb2xKEUUNQm13bb2c4GqebiVcxLk90s3A=; b=pREZiAeeKCfn8Npf4tPqFkLvxpV3tj1IBLb64+w2rv0Qj4d7roR4fF7scNd1ax9Mrk enWj5bLXDmTtz+KjVX6ywPu+Z6tJzqaQmVxePO9PHuUgfCWgkvbVOoSDB/mxGHyOz3Bf o1Rn5vPfxBhr3Th+2YkeKUKtytXniqP+xZdVo= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224351; x=1778829151; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=Ma/3Xq8wBkjb2xKEUUNQm13bb2c4GqebiVcxLk90s3A=; b=P22vE/VQZAJQhtTHZCFUma7sgf2KHDcLlKsnrSRIWU4yJU8p+/bzmb362bzjN+sP+L uwinpJmILIF0WmFxlCvEYCd9dOY565mWp4CwdIAAiF1JpYYaM20pXG6Ayuk8fdBJrZ8x K7+ZpVW7srTJaaz6Ser7ND5TtHfFSvT8mXl9+8qnMzYbSU2heVL7BFQlxO9zu/05i6vD Z2JYIMV6IToqlMBOyWAs7wkKhp8FqYczGKR4+bcTBv8DoOvKZlMJfYLlrvimioOqdliA KLz496zK/vJ5OcUjit24XYJIB6ASOPr9nEOOYd6IyS7WDm+0I68Uf4ZZi2doK23/esGx fmOw== X-Gm-Message-State: AOJu0YxUgThtO8CVsGM3BXT6YKZc6HBUOc6TA7wZmalIyDAlNeannHPl 8EyHVY+gWMg60aBNQ5JNZSZuwU1ulwYGeabJ01oC7R6dkxUh6ShBKBM30Qwe2TuIFm1Zq7e/QO4 NUg+7nWA= X-Gm-Gg: Acq92OFObj7FyhwQbUqqlTJFw+PyVP2HAzItecI0LETktI0Qay5XKVvqNWQNOet7c7i uNlRZuAfwXif8SFG8mYHDdzLYtmwjkS8bQpwUqysvOdMKSn3PeKkywvDmE0AhdG0SRwZcI+1+Ky qyw84ml6kZ+olqF+nr+vfRG62RjkKr0tmNjy7x9IpL8wXKWWvanAbPTcqXK5WmCCJIlS2WEQjML WtqcuW6qeXC624fVXjlljZBZOaJxgIqeK2gng3825aYSRLMas0NdufoZgyaJ6jqqHo1hcwsR8lZ eyBOdFIylT/TVaoJuIz/hrb7JerDlqMQuqn5jOg0i4dV5yGt9vvmMjVeCnm34LJPaH+YullJwnd SiFnkpOq0WBMk3NonkcPPMdQxFYWQrh41pxQSMHjASbwhufQfEhUpDId7GxrFcHu7pW9idSMsYh RzCQFekkngHfyoNv6dWN7mAJ/cZKGdbihi1FTGkT5pdm7VxqpwnsBNbabK+gnV5OZooYIseCvpX pNsKUJ5NHENfyFn2ql65h1dcwloHdXqcswRZA== X-Received: by 2002:a05:6000:22ca:b0:43e:a70d:7622 with SMTP id ffacd0b85a97d-4515cf11e8bmr18332093f8f.22.1778224351002; Fri, 08 May 2026 00:12:31 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.30 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:30 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 28/52] rust: fix codegen test failure on big-endian targets Date: Fri, 8 May 2026 09:11:21 +0200 Message-ID: <3bab91e8a72024341c3ecbb7a33f8b407dda9502.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:40 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236670 From: Peter Tatrai The test tests/codegen-llvm/issues/multiple-option-or-permutations.rs uses FileCheck to verify LLVM IR for Option::or operations on slices. The CHECK-NEXT directives assumed a little-endian memory layout where the Option discriminant is the low byte, emitting a simple: trunc i16 %0 to i1 On big-endian targets (e.g. powerpc), the discriminant resides in the high byte, so LLVM first emits an lshr before the trunc, causing the test to fail. Backport upstream fix from rust-lang/rust#151780 which introduces BIG/LITTLE revisions with the only-endian-big / ignore-endian-big directives (also backported via directive_names.rs change) to handle both layouts correctly. Fixes: rust-lang/rust#151718 Upstream-Status: Backport [https://github.com/rust-lang/rust/pull/151780] Signed-off-by: Peter Tatrai Signed-off-by: Mathieu Dubois-Briand (cherry picked from commit 1efb76b9698d025e9d8b3de2039e6a422b5f4bee) Signed-off-by: Yoann Congal --- ...ion-or-permutations-test-for-big-end.patch | 121 ++++++++++++++++++ meta/recipes-devtools/rust/rust-source.inc | 1 + 2 files changed, 122 insertions(+) create mode 100644 meta/recipes-devtools/rust/files/0001-Fix-multiple-option-or-permutations-test-for-big-end.patch diff --git a/meta/recipes-devtools/rust/files/0001-Fix-multiple-option-or-permutations-test-for-big-end.patch b/meta/recipes-devtools/rust/files/0001-Fix-multiple-option-or-permutations-test-for-big-end.patch new file mode 100644 index 00000000000..a36089cf3ac --- /dev/null +++ b/meta/recipes-devtools/rust/files/0001-Fix-multiple-option-or-permutations-test-for-big-end.patch @@ -0,0 +1,121 @@ +From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001 +From: Ryan Ward +Date: Tue, 28 Jan 2026 12:21:35 +0000 +Subject: [PATCH] Fix multiple-option-or-permutations test for big-endian + targets + +The FileCheck tests for Option::or on slices assumed little-endian +layout. On big-endian targets (e.g. powerpc), the Option discriminant +resides in the high byte, so LLVM emits an lshr before the trunc. + +Add only-endian-big directive support and use BIG/LITTLE revisions to +cover both cases. + +Upstream-Status: Backport [https://github.com/rust-lang/rust/pull/151780] +Signed-off-by: Ryan Ward +Signed-off-by: Peter Tatrai +--- + .../compiletest/src/directives/directive_names.rs | 1 + + .../issues/multiple-option-or-permutations.rs | 47 ++++++++++++++++-- + 2 files changed, 44 insertions(+), 4 deletions(-) + +diff --git a/src/tools/compiletest/src/directives/directive_names.rs b/src/tools/compiletest/src/directives/directive_names.rs +index 9813ac7ff500d..334b2dda343a5 100644 +--- a/src/tools/compiletest/src/directives/directive_names.rs ++++ b/src/tools/compiletest/src/directives/directive_names.rs +@@ -218,6 +218,7 @@ pub(crate) const KNOWN_DIRECTIVE_NAMES: &[&str] = &[ + "only-eabihf", + "only-elf", + "only-emscripten", ++ "only-endian-big", + "only-gnu", + "only-i686-pc-windows-gnu", + "only-i686-pc-windows-msvc", +diff --git a/tests/codegen-llvm/issues/multiple-option-or-permutations.rs b/tests/codegen-llvm/issues/multiple-option-or-permutations.rs +index 9ec4ec8eeb159..8756d45eaa03e 100644 +--- a/tests/codegen-llvm/issues/multiple-option-or-permutations.rs ++++ b/tests/codegen-llvm/issues/multiple-option-or-permutations.rs +@@ -1,4 +1,7 @@ + // Tests output of multiple permutations of `Option::or` ++//@ revisions: LITTLE BIG ++//@ [BIG] only-endian-big ++//@ [LITTLE] ignore-endian-big + //@ compile-flags: -Copt-level=3 -Zmerge-functions=disabled + + #![crate_type = "lib"] +@@ -70,8 +73,16 @@ pub fn if_some_u8(opta: Option, optb: Option) -> Option { + #[no_mangle] + pub fn or_match_slice_u8(opta: Option<[u8; 1]>, optb: Option<[u8; 1]>) -> Option<[u8; 1]> { + // CHECK: start: +- // CHECK-NEXT: [[SOME_A:%.+]] = trunc i16 %0 to i1 +- // CHECK-NEXT: [[R:%.+]] = select i1 [[SOME_A]], i16 %0, i16 %1 ++ // LITTLE-NEXT: [[SOME_A:%.+]] = trunc i16 %0 to i1 ++ // LITTLE-NEXT: [[R:%.+]] = select i1 [[SOME_A]], i16 %0, i16 %1 ++ // BIG-NEXT: [[OPT_A:%.+]] = lshr i16 %0, 8 ++ // BIG-NEXT: [[SOME_A:%.+]] = trunc i16 [[OPT_A]] to i1 ++ // BIG-NEXT: [[OPT_B:%.+]] = lshr i16 %1, 8 ++ // BIG-NEXT: [[A_OR_B:%.+]] = select i1 [[SOME_A]], i16 [[OPT_A]], i16 [[OPT_B]] ++ // BIG-NEXT: [[AGGREGATE:%.+]] = select i1 [[SOME_A]], i16 %0, i16 %1 ++ // BIG-NEXT: [[R_LOWER:%.+]] = and i16 [[AGGREGATE]], 255 ++ // BIG-NEXT: [[R_UPPER:%.+]] = shl nuw i16 [[A_OR_B]], 8 ++ // BIG-NEXT: [[R:%.+]] = or disjoint i16 [[R_UPPER]], [[R_LOWER]] + // CHECK: ret i16 [[R]] + match opta { + Some(x) => Some(x), +@@ -84,8 +95,16 @@ pub fn or_match_slice_u8(opta: Option<[u8; 1]>, optb: Option<[u8; 1]>) -> Option<[u8; 1]> { + #[no_mangle] + pub fn or_match_slice_alt_u8(opta: Option<[u8; 1]>, optb: Option<[u8; 1]>) -> Option<[u8; 1]> { + // CHECK: start: +- // CHECK-NEXT: [[SOME_A:%.+]] = trunc i16 %0 to i1 +- // CHECK-NEXT: [[R:%.+]] = select i1 [[SOME_A]], i16 %0, i16 %1 ++ // LITTLE-NEXT: [[SOME_A:%.+]] = trunc i16 %0 to i1 ++ // LITTLE-NEXT: [[R:%.+]] = select i1 [[SOME_A]], i16 %0, i16 %1 ++ // BIG-NEXT: [[OPT_A:%.+]] = lshr i16 %0, 8 ++ // BIG-NEXT: [[SOME_A:%.+]] = trunc i16 [[OPT_A]] to i1 ++ // BIG-NEXT: [[OPT_B:%.+]] = lshr i16 %1, 8 ++ // BIG-NEXT: [[A_OR_B:%.+]] = select i1 [[SOME_A]], i16 [[OPT_A]], i16 [[OPT_B]] ++ // BIG-NEXT: [[AGGREGATE:%.+]] = select i1 [[SOME_A]], i16 %0, i16 %1 ++ // BIG-NEXT: [[R_LOWER:%.+]] = and i16 [[AGGREGATE]], 255 ++ // BIG-NEXT: [[R_UPPER:%.+]] = shl nuw i16 [[A_OR_B]], 8 ++ // BIG-NEXT: [[R:%.+]] = or disjoint i16 [[R_UPPER]], [[R_LOWER]] + // CHECK: ret i16 [[R]] + match opta { + Some(_) => opta, +@@ -98,8 +117,16 @@ pub fn or_match_slice_alt_u8(opta: Option<[u8; 1]>, optb: Option<[u8; 1]>) -> Option<[u8; 1]> { + #[no_mangle] + pub fn option_or_slice_u8(opta: Option<[u8; 1]>, optb: Option<[u8; 1]>) -> Option<[u8; 1]> { + // CHECK: start: +- // CHECK-NEXT: [[SOME_A:%.+]] = trunc i16 %0 to i1 +- // CHECK-NEXT: [[R:%.+]] = select i1 [[SOME_A]], i16 %0, i16 %1 ++ // LITTLE-NEXT: [[SOME_A:%.+]] = trunc i16 %0 to i1 ++ // LITTLE-NEXT: [[R:%.+]] = select i1 [[SOME_A]], i16 %0, i16 %1 ++ // BIG-NEXT: [[OPT_A:%.+]] = lshr i16 %0, 8 ++ // BIG-NEXT: [[SOME_A:%.+]] = trunc i16 [[OPT_A]] to i1 ++ // BIG-NEXT: [[OPT_B:%.+]] = lshr i16 %1, 8 ++ // BIG-NEXT: [[A_OR_B:%.+]] = select i1 [[SOME_A]], i16 [[OPT_A]], i16 [[OPT_B]] ++ // BIG-NEXT: [[AGGREGATE:%.+]] = select i1 [[SOME_A]], i16 %0, i16 %1 ++ // BIG-NEXT: [[R_LOWER:%.+]] = and i16 [[AGGREGATE]], 255 ++ // BIG-NEXT: [[R_UPPER:%.+]] = shl nuw i16 [[A_OR_B]], 8 ++ // BIG-NEXT: [[R:%.+]] = or disjoint i16 [[R_UPPER]], [[R_LOWER]] + // CHECK: ret i16 [[R]] + opta.or(optb) + } +@@ -109,8 +136,16 @@ pub fn option_or_slice_u8(opta: Option<[u8; 1]>, optb: Option<[u8; 1]>) -> Option<[u8; 1]> { + #[no_mangle] + pub fn if_some_slice_u8(opta: Option<[u8; 1]>, optb: Option<[u8; 1]>) -> Option<[u8; 1]> { + // CHECK: start: +- // CHECK-NEXT: [[SOME_A:%.+]] = trunc i16 %0 to i1 +- // CHECK-NEXT: [[R:%.+]] = select i1 [[SOME_A]], i16 %0, i16 %1 ++ // LITTLE-NEXT: [[SOME_A:%.+]] = trunc i16 %0 to i1 ++ // LITTLE-NEXT: [[R:%.+]] = select i1 [[SOME_A]], i16 %0, i16 %1 ++ // BIG-NEXT: [[OPT_A:%.+]] = lshr i16 %0, 8 ++ // BIG-NEXT: [[SOME_A:%.+]] = trunc i16 [[OPT_A]] to i1 ++ // BIG-NEXT: [[OPT_B:%.+]] = lshr i16 %1, 8 ++ // BIG-NEXT: [[A_OR_B:%.+]] = select i1 [[SOME_A]], i16 [[OPT_A]], i16 [[OPT_B]] ++ // BIG-NEXT: [[AGGREGATE:%.+]] = select i1 [[SOME_A]], i16 %0, i16 %1 ++ // BIG-NEXT: [[R_LOWER:%.+]] = and i16 [[AGGREGATE]], 255 ++ // BIG-NEXT: [[R_UPPER:%.+]] = shl nuw i16 [[A_OR_B]], 8 ++ // BIG-NEXT: [[R:%.+]] = or disjoint i16 [[R_UPPER]], [[R_LOWER]] + // CHECK: ret i16 [[R]] + if opta.is_some() { opta } else { optb } + } diff --git a/meta/recipes-devtools/rust/rust-source.inc b/meta/recipes-devtools/rust/rust-source.inc index 43d60fb6f63..f11bbea9b34 100644 --- a/meta/recipes-devtools/rust/rust-source.inc +++ b/meta/recipes-devtools/rust/rust-source.inc @@ -10,6 +10,7 @@ SRC_URI += "https://static.rust-lang.org/dist/rustc-${RUST_VERSION}-src.tar.xz;n file://0001-Fix-flaky-assertions-in-oneshot-tests.patch;patchdir=${RUSTSRC} \ file://0001-Update-amdgpu-data-layout.patch;patchdir=${RUSTSRC} \ file://0001-Adjust-loongarch-assembly-test.patch;patchdir=${RUSTSRC} \ + file://0001-Fix-multiple-option-or-permutations-test-for-big-end.patch;patchdir=${RUSTSRC} \ " SRC_URI[rust.sha256sum] = "174fce10ce012317ca995810296d8af199318838180b03d68a853e0f02d4b571" From patchwork Fri May 8 07:11:22 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87713 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 38AEDCD37B5 for ; Fri, 8 May 2026 07:12:40 +0000 (UTC) Received: from mail-wr1-f49.google.com (mail-wr1-f49.google.com [209.85.221.49]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.8170.1778224353708350604 for ; Fri, 08 May 2026 00:12:34 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=0YRosonD; spf=pass (domain: smile.fr, ip: 209.85.221.49, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f49.google.com with SMTP id ffacd0b85a97d-44b330c5cc6so1186751f8f.1 for ; Fri, 08 May 2026 00:12:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224352; x=1778829152; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=W8O7Iu1ER7xa6Nzms4p7Af7/0HO3ouo9FLhOP0QUSiQ=; b=0YRosonD6ioZ3iSyNc9i1wIZ6DnQ8hy239cIPG7dwS/341ezdmrG3VxeHPgt6//aDy m3JRnezWLRrKCBKFYZ+7QE2bSQ9NxsIJCh+97D7qrniTRA3qiLDh4xhYQOeoKMHPCKPk 9Y1LR7rarls9XaLDQ+8jwEIyWnk9CkknmrM8c= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224352; x=1778829152; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=W8O7Iu1ER7xa6Nzms4p7Af7/0HO3ouo9FLhOP0QUSiQ=; b=MWU8dFEBRc9NU6TGT00nShJA/GiKG3Cg0AG4wqwSJNbfdzF7J1ANXIG8HTNWLb4e/H jykrrZ91x/MyC2ygVzRYKBZn9pf3yC57G591Uc/q6IdWOGanZM+WInTn/KGm+eFvHot1 gGsf+TVExhNH/JjtVbtF8sowdsaxExzspQ3nBwpRpaxpMIxnq6JcRO+ieT97oNhaV9vp bVmatmSyTYcZouLVjadVP4PA9UgTt6ftGa/2hoX+X28mVeG1JRZnqlnm/kdvE1vHEDkK 3B0cYS/+DGf44U85ZmhCIzONDmmatsaak3xDfsFvsN3hjjhzDyI7DmDgaInbILGPOFWq LCiw== X-Gm-Message-State: AOJu0Yze3hnxlrsXx929PTLZ+o5GpW+7qe3uLd3SrxudNt5NTgHoFBkh D6TE3yGKGh/EnDUJL83MSCKdxIRz40zswjQXeTYCnoahDZrBgvkNoo2vyakAdxD3V1Dnhbj6aAq pJx5VyXc= X-Gm-Gg: Acq92OFRUewFMaRSPDHKtjbSadEcxmplqthLy7vTvVlfLAd7JbduzWoXwzEeqZPl4AI xz/fmLcdRQLTHNdq76KYQ1Ys+8nejAZymmTE3emdX27FKlbhoWR3exff7gKYvCjkpsLTS+wMzrc BvtE/bKMU7zoKLijvkXuLe75kxhriw+C84KduYQYD0AG1IbABqaI59Vm+aN5BzmKse5lfcS8WUR 61VYod3kwnVgSoJnjpFpwyY80MH5JuEk74/BKxhOmojh6+DjZ5KqtvQB3werGU8618Gh+rxM6aJ CAmsobPg1jQaFKSb4qgpXZj6PBp+qu9ul9gzlm3ff8joQTbJSCN9dwiDjbGWhp8qnWYrmsIbB+0 wwrZzB65XrTmvo1lw1YFMkJ2dSpynzzkfqo94i5QoIYucVgSvCw3gZg4AJnE/OtycVgTjj1eRHs u6bBVYnyDhhmjxNxpdvOJKncIibGDpjVLQMs9kZwyjFzyg32xJTji65Z4s+GUtjGemmWNXZiUpW QxqK7Rj3GLOS+Slyxw3fcxgo9ChIH1WtcqzeA== X-Received: by 2002:adf:f146:0:b0:452:bc55:c684 with SMTP id ffacd0b85a97d-452bc55c6cemr7615710f8f.19.1778224351723; Fri, 08 May 2026 00:12:31 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.31 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:31 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 29/52] bluez5: add patches to fix 8.56 cli issues Date: Fri, 8 May 2026 09:11:22 +0200 Message-ID: <9ba494f3f3a06979fb23be925ed90d9e2720f2d7.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:40 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236671 From: Leonardo Costa On bluez5 5.86, the bluetoothctl cli interface does not work outside of the dedicated shell to list controllers and devices [1]. These patches fix the issue while version 5.87 is not published. [1] https://github.com/bluez/bluez/issues/1896 Upstream-Status: Backport [https://github.com/bluez/bluez/commit/b33e923b55e4d0e9d78a83cfcb541fd1f687ef54, https://github.com/bluez/bluez/commit/21e13976f2e375d701b8b7032ba5c1b2e56c305f] Signed-off-by: Leonardo Costa Signed-off-by: Mathieu Dubois-Briand (cherry picked from commit 922227e3ed694f3c96ce3d761ba594255c03b5cc) Signed-off-by: Yoann Congal --- meta/recipes-connectivity/bluez5/bluez5.inc | 2 + ...ell-Don-t-init-input-for-non-interac.patch | 42 +++++++++++++++++++ ...d-broken-stdin-handling-in-home-made.patch | 36 ++++++++++++++++ 3 files changed, 80 insertions(+) create mode 100644 meta/recipes-connectivity/bluez5/bluez5/0001-Revert-shared-shell-Don-t-init-input-for-non-interac.patch create mode 100644 meta/recipes-connectivity/bluez5/bluez5/0001-tools-Work-around-broken-stdin-handling-in-home-made.patch diff --git a/meta/recipes-connectivity/bluez5/bluez5.inc b/meta/recipes-connectivity/bluez5/bluez5.inc index dd205830159..843e36b78de 100644 --- a/meta/recipes-connectivity/bluez5/bluez5.inc +++ b/meta/recipes-connectivity/bluez5/bluez5.inc @@ -68,6 +68,8 @@ SRC_URI = "${KERNELORG_MIRROR}/linux/bluetooth/bluez-${PV}.tar.xz \ file://init \ file://run-ptest \ file://0001-tests-add-a-target-for-building-tests-without-runnin.patch \ + file://0001-Revert-shared-shell-Don-t-init-input-for-non-interac.patch \ + file://0001-tools-Work-around-broken-stdin-handling-in-home-made.patch \ " S = "${UNPACKDIR}/bluez-${PV}" diff --git a/meta/recipes-connectivity/bluez5/bluez5/0001-Revert-shared-shell-Don-t-init-input-for-non-interac.patch b/meta/recipes-connectivity/bluez5/bluez5/0001-Revert-shared-shell-Don-t-init-input-for-non-interac.patch new file mode 100644 index 00000000000..a0271513eb4 --- /dev/null +++ b/meta/recipes-connectivity/bluez5/bluez5/0001-Revert-shared-shell-Don-t-init-input-for-non-interac.patch @@ -0,0 +1,42 @@ +From b33e923b55e4d0e9d78a83cfcb541fd1f687ef54 Mon Sep 17 00:00:00 2001 +From: Bastien Nocera +Date: Fri, 27 Feb 2026 12:27:17 +0100 +Subject: [PATCH] Revert "shared/shell: Don't init input for non-interactive + shells" + +This reverts commit e73bf582dae60356641a32fc27ae03d359ec4c47. + +The fix caused "bluetoothctl list" to not output any text, breaking +a lot of existing scripts. + +Closes: https://bugzilla.redhat.com/show_bug.cgi?id=2440346 + +Upstream-Status: Backport [https://github.com/bluez/bluez/commit/b33e923b55e4d0e9d78a83cfcb541fd1f687ef54] +Signed-off-by: Leonardo Costa +--- + src/shared/shell.c | 10 +++++----- + 1 file changed, 5 insertions(+), 5 deletions(-) + +diff --git a/src/shared/shell.c b/src/shared/shell.c +index 78d58c513..b061f8001 100644 +--- a/src/shared/shell.c ++++ b/src/shared/shell.c +@@ -1642,13 +1642,13 @@ static bool shell_quit(void *data) + + bool bt_shell_attach(int fd) + { +- if (data.mode == MODE_INTERACTIVE) { +- struct input *input; ++ struct input *input; + +- input = input_new(fd); +- if (!input) +- return false; ++ input = input_new(fd); ++ if (!input) ++ return false; + ++ if (data.mode == MODE_INTERACTIVE) { + io_set_read_handler(input->io, input_read, input, NULL); + io_set_disconnect_handler(input->io, input_hup, input, NULL); + diff --git a/meta/recipes-connectivity/bluez5/bluez5/0001-tools-Work-around-broken-stdin-handling-in-home-made.patch b/meta/recipes-connectivity/bluez5/bluez5/0001-tools-Work-around-broken-stdin-handling-in-home-made.patch new file mode 100644 index 00000000000..c362936bc20 --- /dev/null +++ b/meta/recipes-connectivity/bluez5/bluez5/0001-tools-Work-around-broken-stdin-handling-in-home-made.patch @@ -0,0 +1,36 @@ +From 21e13976f2e375d701b8b7032ba5c1b2e56c305f Mon Sep 17 00:00:00 2001 +From: Bastien Nocera +Date: Fri, 27 Feb 2026 12:27:18 +0100 +Subject: [PATCH] tools: Work-around broken stdin handling in home-made + mainloop + +bluetoothd has 3 mainloop implementations, one relying on ell, one +relying on glib, and another home-made. + +The home-made mainloop handler use epoll() without any fallbacks, and +will hang if one tries to epoll() an stdin that redirects from +/dev/null. + +Closes: https://github.com/bluez/bluez/issues/700 + +Upstream-Status: Backport [https://github.com/bluez/bluez/commit/b33e923b55e4d0e9d78a83cfcb541fd1f687ef54] +Signed-off-by: Leonardo Costa +--- + Makefile.tools | 4 ++-- + 1 file changed, 2 insertions(+), 2 deletions(-) + +diff --git a/Makefile.tools b/Makefile.tools +index 589f7c94f..7c52e053f 100644 +--- a/Makefile.tools ++++ b/Makefile.tools +@@ -531,8 +531,8 @@ tools_obexctl_LDADD = gdbus/libgdbus-internal.la src/libshared-glib.la \ + + tools_btmgmt_SOURCES = tools/btmgmt.c src/uuid-helper.c client/display.c \ + client/mgmt.c +-tools_btmgmt_LDADD = lib/libbluetooth-internal.la src/libshared-mainloop.la \ +- -lreadline ++tools_btmgmt_LDADD = lib/libbluetooth-internal.la src/libshared-glib.la \ ++ $(GLIB_LIBS) -lreadline + if DEPRECATED + noinst_PROGRAMS += attrib/gatttool + From patchwork Fri May 8 07:11:23 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87711 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 28A10CD37B2 for ; Fri, 8 May 2026 07:12:40 +0000 (UTC) Received: from mail-wm1-f42.google.com (mail-wm1-f42.google.com [209.85.128.42]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.8171.1778224354320235560 for ; Fri, 08 May 2026 00:12:34 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=bLlaHmO5; spf=pass (domain: smile.fr, ip: 209.85.128.42, mailfrom: yoann.congal@smile.fr) Received: by mail-wm1-f42.google.com with SMTP id 5b1f17b1804b1-4891e5b9c1fso16425115e9.2 for ; Fri, 08 May 2026 00:12:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224352; x=1778829152; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=WMriodXZxQR2RdfOwmWcNw9tI92RdXgtdkdHSftHinw=; b=bLlaHmO55WDZGej7fW31JjWn7/BRY+6xk5SMgzPi/cXk6j/iMZpan5EaPiEEfg8hOf u9mBmzbJGXlss6h9kg1lmmALYI4zK8jdLk7BY3klBljRhSuoJPmyJoZ+aqhm0uSaU0jM gSzBb9zo6w7VQKR9ycgqgHf5xWMVJnTS91+Mw= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224352; x=1778829152; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=WMriodXZxQR2RdfOwmWcNw9tI92RdXgtdkdHSftHinw=; b=TI3tyPIvxc2B9Fi7fS52g8id2OU1Nu7Q0GV/JBP9Txv6ZHuJNsgN7L1QyVtSxDQ5Z9 KTXblcjbbl7ldUCS1VEhfaA8985D5twUL/fIcrt6Z+lt6CUapoY5m8BHxTTX2Ws/8KJn pxMJ9gOEKkVSjjuj5xm4Z5I5fEcyfHEymc0gLF+bcqZmrO0Cl3kYyPNkJlDE7LbqinqT uW9NSccZlE8W81HuawJ1HZ918+cp+zuudfTUZMtfd8xiauh5WEbZUGfUb1S29VqJ/wmD nx7UeYErpU8bOaUi+ZRBWt+GdE3EJi5kIEj0TQWS4bPSCeafjGtKUz0CgSqXJLHoHQYp /lsQ== X-Gm-Message-State: AOJu0YzRpr2kDN0auvz2dy3VZ+fswL1hDmfxHlDtE/2lDacY81KsSk5z irYgfzPtLhWljvQwiXdSffKa5i96GsOEIHrntGKbQsufbSDjJL4cnEFpaPq6tAYwGOpPotC3p4O D+ygIWG4= X-Gm-Gg: AeBDieu75jD+lvUttx5/F4HnAWSxx3kGIRWeY0oIM2m5rhivvYmoglzLsKtjgODe0c3 hTdjPZkixYseBm5jXqad/yJHM2VWAW8VlzEmhZZlmvaR29/TFwQ+xccm832cZKffbUFv6Fm7zEK /oKHE2B2x5y+0MhVaCp0OfW6G4aGXoKks9mQHwieJshXfmOVhmziXxf1LxUWgIL4bzkjfTxZS/8 8SIu3dqwhSuifKTau8/LCVCVff490vrd5w/gBDTVmGe3SHUWmW7gvjlLYGNbM+dATHold9kG9vJ 9+0WXYQw1wAMydqA0e3ljehxTYrSMXGILpXk6PfiQr4Qy5fhXi8zwNPFDXIoLxc46IHLLRCAR8P HlgFxbEaZAanPRscl1LbV0OCELdDIO94hjJW1hPq3t83P724oQGA60a4xxkVINcXtl4QUU0F7IC D9TyBXiDYcBSiiuNckFGKHm6OxHjMwEwF02aEnBAdx5OJA0l9fqbnQ2h1u2gCP/dJo9grV2rMbM E8Pyxt5yiftbzVcMIR3PUu7IC+lSQdYu8Bfxg== X-Received: by 2002:a05:600c:3208:b0:48a:75b9:b0bc with SMTP id 5b1f17b1804b1-48e51f46c07mr95918435e9.29.1778224352324; Fri, 08 May 2026 00:12:32 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.31 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:31 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 30/52] python3-urllib3: enable setuptools-scm 10.x Date: Fri, 8 May 2026 09:11:23 +0200 Message-ID: <2c562a17737923b288bcf5c252cd729d54a7514a.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:40 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236672 From: Trevor Gamblin Backport a patch from upstream to allow python3-urllib3 2.6.3 to build with python3-setuptools-scm 10.x, so that we can use an updated version of that recipe. Signed-off-by: Trevor Gamblin Signed-off-by: Richard Purdie (cherry picked from commit 012b14d1ef16d4a91f98a7f62dd5b0ac8ee923ab) Signed-off-by: Yoann Congal --- ...ml-remove-setuptools-scm-upper-limit.patch | 30 +++++++++++++++++++ .../python/python3-urllib3_2.6.3.bb | 4 +++ 2 files changed, 34 insertions(+) create mode 100644 meta/recipes-devtools/python/python3-urllib3/0001-pyproject.toml-remove-setuptools-scm-upper-limit.patch diff --git a/meta/recipes-devtools/python/python3-urllib3/0001-pyproject.toml-remove-setuptools-scm-upper-limit.patch b/meta/recipes-devtools/python/python3-urllib3/0001-pyproject.toml-remove-setuptools-scm-upper-limit.patch new file mode 100644 index 00000000000..62c7e3d68db --- /dev/null +++ b/meta/recipes-devtools/python/python3-urllib3/0001-pyproject.toml-remove-setuptools-scm-upper-limit.patch @@ -0,0 +1,30 @@ +From 7a4a7fddff72413bac190ad14bca8fca2d1461e3 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Miro=20Hron=C4=8Dok?= +Date: Wed, 1 Apr 2026 19:09:22 +0200 +Subject: [PATCH] Allow using setuptools_scm 10 (#4954) + +Upstream-Status: Backport [https://github.com/urllib3/urllib3/commit/166f66faa5ef23e255f654e8c6b66ad8590fe630] + +It works in Fedora, so I hope it will work upstream as well. + +Signed-off-by: Trevor Gamblin +--- + pyproject.toml | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/pyproject.toml b/pyproject.toml +index 45538a6e..d2607c78 100644 +--- a/pyproject.toml ++++ b/pyproject.toml +@@ -1,7 +1,7 @@ + # This file is protected via CODEOWNERS + + [build-system] +-requires = ["hatchling>=1.27.0,<2", "hatch-vcs>=0.4.0,<0.6.0", "setuptools-scm>=8,<10"] ++requires = ["hatchling>=1.27.0,<2", "hatch-vcs>=0.4.0,<0.6.0", "setuptools-scm>=8,<11"] + build-backend = "hatchling.build" + + [project] +-- +2.53.0 + diff --git a/meta/recipes-devtools/python/python3-urllib3_2.6.3.bb b/meta/recipes-devtools/python/python3-urllib3_2.6.3.bb index e63791a8f45..b8028efecee 100644 --- a/meta/recipes-devtools/python/python3-urllib3_2.6.3.bb +++ b/meta/recipes-devtools/python/python3-urllib3_2.6.3.bb @@ -5,6 +5,10 @@ LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=52d273a3054ced561275d4d15260ecda" SRC_URI[sha256sum] = "1b62b6884944a57dbe321509ab94fd4d3b307075e0c2eae991ac71ee15ad38ed" +SRC_URI += "\ + file://0001-pyproject.toml-remove-setuptools-scm-upper-limit.patch \ +" + inherit pypi python_hatchling DEPENDS += "python3-hatch-vcs-native" From patchwork Fri May 8 07:11:24 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87710 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 0CB18CD37B1 for ; Fri, 8 May 2026 07:12:40 +0000 (UTC) Received: from mail-wr1-f42.google.com (mail-wr1-f42.google.com [209.85.221.42]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.8172.1778224355079138781 for ; Fri, 08 May 2026 00:12:35 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=qCJXYK/f; spf=pass (domain: smile.fr, ip: 209.85.221.42, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f42.google.com with SMTP id ffacd0b85a97d-44e1ebb3122so886927f8f.2 for ; Fri, 08 May 2026 00:12:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224353; x=1778829153; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=pry2/wpAennuQw1syu/NS/SrWGwuuaO/BSF/jato810=; b=qCJXYK/fWAVMBcPomyFPWRoEBpyUC1R7oaBTkRHEsvBGq/lMHNt26UZiHNPNKwpSuu atBZgyqlD865rTii2INq8x91lWJAYoLshrcrg81PEY/IvidamgocZgA1WF4hnDWwfBRw KBKetsmq/1QapDr/2ieowDtwtU1141MobknXo= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224353; x=1778829153; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=pry2/wpAennuQw1syu/NS/SrWGwuuaO/BSF/jato810=; b=eoONEE/7BaMzuzI9kxOKLxRbiFlHR+PtXZWygTV1nI5RM5WE/oUn0vqQP0tQzqXShn xaUs6H3e95f5QqGwppMkYJCDK5ZUcgAKZguw1Ef8W4KajAWzfAXpFnIABfSJhh3fPT0s wf2GxmFRdfSyUcW46JPyLblly+feYBnvQpWp90YCW/TqqerkUan0n0tEShgYy28WXGKG c3E1O1CsTuhkuyy/Yu0p2PPqzHsFK9qLLiIta5lhsBkqS+orR3gCQHXB8ue0+mHn3cXb IjPHRXNKnH/4COU6RMBMgqV5RdqLQA8VRY9Hv/SPgMfE2xP2sofQZmGPyeFghxgC+QsJ MxYg== X-Gm-Message-State: AOJu0Yz3BSrubSuG0KWNgEXc1ubx5/STgLa6o1+kHvs/miHkti36JoSy ZD1kA00Krv9qjMVhInrm60PIH3aCOTQtMHYMWaffR/o9+bFiH/rFXA+82DhDFzNv42zwPnrl5c3 xCWK3EQ8= X-Gm-Gg: Acq92OGat+orUUYLAP1GI7No/tXSrlUuO4EGuffPrYhMK0AV5JqCyEYJb30SEtbZeLV K8Rwbx28YMlehH+Ot7pNlXUOjvN1xR55+BFMMYbyyOyATEigi7AQ/z8oDI6tvkLuLgNmlWkZDV9 zTQyg3N11SQhyfnpR+qNyobTSTZRWCG0GJsSKy8czgmxLxTD56cbL9DsqfhS61rjy+aA99vKfMN Z/c49N8LElxODJ0M2yv7QveGUReeU0lnqNczc0r2TsPpOLpS7+1GPTczGMs12YzzazxzPIf5Svk MRtO0y3pou5GvNN4MUN+bXiTYmjMBBoJ8UGYf4X56msshPqEGw+NaJ2faHu55ha6ZH8xX8F/pC4 TwPdnfjND2r0Zf5KS9GdlXcfC7Zji4PZzZ6e5fXtGhJ2u4kX0QFMTveYw2+LBaYqUNwWtYM8sRH JhBBpetJW4PcjgcT2s2VPbrWkOyXw8I9eLWQHJQJTL7Zsoi64e1iXE9BDgZRKYN+xKGw0GbIYUP khgPAzVjojWdsPj8A7GiDQ405Q= X-Received: by 2002:a05:6000:d91:b0:43d:7883:87ce with SMTP id ffacd0b85a97d-4515d5c6c86mr12871170f8f.34.1778224352984; Fri, 08 May 2026 00:12:32 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.32 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:32 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 31/52] perf: add PACKAGECONFIG for llvm Date: Fri, 8 May 2026 09:11:24 +0200 Message-ID: <7dd6965decc19a969cb0fc2f54c947d7f02fd4ae.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:40 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236673 From: Li Wang for avoiding to enable llvm option under uncommon condition, make llvm controll under PACKAGECONFIG. error log: ERROR: perf-1.0-r2 do_package_qa: QA Issue: /usr/bin/trace contained in package perf requires libLLVM.so.2x.x(LLVM_2x.x)(64bit), but no providers found in RDEPENDS:perf? [file-rdeps] Signed-off-by: Li Wang Signed-off-by: Mathieu Dubois-Briand (cherry picked from commit a7c0c0f18a61d15c101c7c345de44c94043ae39a) Signed-off-by: Yoann Congal --- meta/recipes-kernel/perf/perf.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-kernel/perf/perf.bb b/meta/recipes-kernel/perf/perf.bb index 7a580884624..f24b44954e7 100644 --- a/meta/recipes-kernel/perf/perf.bb +++ b/meta/recipes-kernel/perf/perf.bb @@ -39,6 +39,7 @@ PACKAGECONFIG[coresight] = "CORESIGHT=1,,opencsd" PACKAGECONFIG[pfm4] = ",NO_LIBPFM4=1,libpfm4" PACKAGECONFIG[babeltrace] = ",NO_LIBBABELTRACE=1,babeltrace" PACKAGECONFIG[zstd] = ",NO_LIBZSTD=1,zstd" +PACKAGECONFIG[llvm] = ",NO_LIBLLVM=1,llvm" # libunwind is not yet ported for some architectures PACKAGECONFIG:remove:arc = "libunwind" From patchwork Fri May 8 07:11:25 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87708 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id E3326CD37AF for ; Fri, 8 May 2026 07:12:39 +0000 (UTC) Received: from mail-wr1-f48.google.com (mail-wr1-f48.google.com [209.85.221.48]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.8239.1778224355654854542 for ; Fri, 08 May 2026 00:12:35 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=FvO/ogJ2; spf=pass (domain: smile.fr, ip: 209.85.221.48, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f48.google.com with SMTP id ffacd0b85a97d-43d734223e4so1101522f8f.0 for ; Fri, 08 May 2026 00:12:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224354; x=1778829154; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=onhHnfX7JxEm9CzESn7tVzM6AUIlUdA/6nw7v4U0VJs=; b=FvO/ogJ2lr7Y9r8+1m8nsvF7goElL3yoT5dzgl8UsQqsS3OVNFhFr+Nsab1Tb+8nkL Ic/3oZh1iUfL2mO9hcuU27epswgj1msiKoHIKYJ3e3krtcH6JRqTU1Mwr++BfqyYu9rQ QGfCHV4IGAZPf5RiNmVL0DznLu9At1Lsz65FI= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224354; x=1778829154; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=onhHnfX7JxEm9CzESn7tVzM6AUIlUdA/6nw7v4U0VJs=; b=NWZbVf3icXKDGL+yE/7EINlidaGOAvPMhE6qwNwjBO5bGYpt8E+QY3P8MofoLHZiHv xjtFpIelAporGfDrZWzwQPEBENZlvOaqkE6hDz4UYqqv0CnS3mU8wLGd7W4SFXSHUERP N8tWJWg/FsNlcsvJ31nZP4hw5jsmgq89bltzA06yLPwshLrNUp7cM4kKSktCruST5ks1 w41fXeyDi3nFWuSc6BJC1f7Yuj7xLXjFZa69uMKhEL9QOqXJrIo5AfbgDNqPdklyKPJO dzBYdfRk9nJAYIrhsBfd3fdxMb5eBHZR/+L4an8usrxCNB16/KUkS8HtxFVnER+7u0Bq Vl6w== X-Gm-Message-State: AOJu0YzJQ2jfWeh6q3hygBHCNnF3Qrv9L4ojtzohQStQ2c/p0zNXkAo1 de7ufEMPu0L9/mKOvkeW63HTCT8i2RM1Ik9TlVVD2ghbcC2fiO8HEL2DCdIH/CTyIw0GGL6qrcq xFnq1Il0= X-Gm-Gg: Acq92OGTwA6wd9RLSI5lryTlih96kbsU5F79i4SDgqdfvlF8R2Rqk1GuTBQciXdqHco 8EFcjwE7Pq6dgXYzXHIpmH1psLMVqYx4m8o0Vc6UKXuaI+Wglvdvrud1huP7T0gDpM23vPHK+z7 X2P3dgiykAX4G1iejIO6TIMJlf7yzweJG42maVE6R9tLeaf31gimNjCHRNKS5g8Brdu6w6JZENI +l9Rp+/K2LxJhI7W6xI5whQQJbwclIkegrYnAr+f+PIDLatcmRi4KWSchCRaGzLyqAUzZYaEhAC 2FIpnrlilOZEE0MGUuecnLGRjrFYXAuPhri5RHr3NPA7AGevkb/CF7UOk86s5LWbisAZSZZnq3Z a5oPZ+nw4OokVaayuarUqmn4QroybJzJzSOLxjUKPazBVckdcDZ42ECMQCRWP9U8VPiVmOM33zd pXi9IEZxGX+DceCyuPDLysP4N+nM9zArA3FeDzQn+HUNJ5YW6l8W3NxRkNVfzsmoMrWnN1+BpBa kXVSLJFBNrAR0uRPKJKthQM302kQr/L8GKnfQ== X-Received: by 2002:a05:6000:2181:b0:44f:b82f:2d18 with SMTP id ffacd0b85a97d-452e81764a0mr6831983f8f.11.1778224353702; Fri, 08 May 2026 00:12:33 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.33 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:33 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 32/52] scripts/cve-json-to-text.py: simplify getopt argument parsing Date: Fri, 8 May 2026 09:11:25 +0200 Message-ID: <7b16c77e448e1b4ee367e708b0e5793a44749b3c.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:39 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236674 From: Bin Cao Remove unused long options from getopt.getopt() call. The long options "help", "input", and "output" were never handled in the option parsing logic, so they are dead code. Signed-off-by: Bin Cao Signed-off-by: Mathieu Dubois-Briand (cherry picked from commit a92dfe569844189344fbb5ea0521b2bf7dbf0623) Signed-off-by: Yoann Congal --- scripts/cve-json-to-text.py | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/scripts/cve-json-to-text.py b/scripts/cve-json-to-text.py index 8d309b37e59..f3386722696 100755 --- a/scripts/cve-json-to-text.py +++ b/scripts/cve-json-to-text.py @@ -42,9 +42,7 @@ def parse_args(argv): """ global infile, outfile try: - opts, args = getopt.getopt( - argv, "hi:o:", ["help", "input", "output"] - ) + opts, args = getopt.getopt(argv, "hi:o:") except getopt.GetoptError: show_syntax_and_exit(1) for opt, arg in opts: From patchwork Fri May 8 07:11:26 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87707 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id CEF3BCD37B0 for ; Fri, 8 May 2026 07:12:39 +0000 (UTC) Received: from mail-wr1-f44.google.com (mail-wr1-f44.google.com [209.85.221.44]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.8240.1778224356375230257 for ; Fri, 08 May 2026 00:12:36 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=jXV/KAJe; spf=pass (domain: smile.fr, ip: 209.85.221.44, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f44.google.com with SMTP id ffacd0b85a97d-44dd5cb0f81so1752513f8f.0 for ; Fri, 08 May 2026 00:12:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224354; x=1778829154; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=kTWz2amJPFd8P630UY5GzXb07txCnOjpjWq9MFjQgNQ=; b=jXV/KAJeopzTn8PZDihbEINHPxH0vnSeIM59xj5CEIfU6nojPYUV3A679VIuSbXIn+ nBRhidBedfQvFTP9H9HwmHDAJnw3jgQoH/uMF9lMK4HvyjOLzt+NkxBbSqElcfVzrEnr kgFCmCrqIVx2wdLsGNJVBjuOQEHtaMX2I2bVs= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224354; x=1778829154; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=kTWz2amJPFd8P630UY5GzXb07txCnOjpjWq9MFjQgNQ=; b=PwxLj/83FFklN2Ju/7a3hfZ4s1Uh6Zcg37IhKMapOm1Zs2o6r196NoogE87Xt7Wsc1 k/l4at8nyCbcz3U5a8N2VK8sQSHtqb4H3HQvul+WUxDi38xiwXoSJ8ywipG0B42qu6SU ev1eCq3PgFnK1bDZbqP/oD1ayVgPwVEp47FvZxgZtCFBzJS/rYp6TWBbCeWdGSGk65JT EBWP7hc6RIXMcX23f3ty2Q8Zr13Sdae695FNnRXbbuQu5ialStGmS/zvhPK7WGbRZdpS ZAMbKZejs+txgABG86T24AjB/pmjerWYcY40vDn3briT/E5JaJ+Zt032W8TFrZ7q6Zy8 aYMg== X-Gm-Message-State: AOJu0YzHgoIXk9BU7Jf6Y7R0Dt+aPYMo7uMhkVb86n22/QL8HmRXnwpx X3gmlfaAlAnpR6TRzbyWzbAvgRMACRYoy/HeWFGRFt6lpoSe0nj0VKlFWoNozmEbVzZwJRvxZ/0 UsUF9v3Y= X-Gm-Gg: Acq92OE2Nw6QvLOJ3hMXT+kAqdOMT56vZBUmWsLNlF1VNQ+LcXB4LBjzFF9F8UodrV2 Wl9I+FKqU4geOzmx7yCl7GaN/UjgA9VMCUbSZjPnWKByqoAoow8Wag5CslqQV+fQOM3Q4SnCYQ1 p4bwNM/NELnMLcZnv6lvJZ5m9+dz3yC1nZfdERW54NXjtGjIWalsvyVYBDoQy41kyfM86U46dCG mNKv74v7lzW0w3CKqXz996jMkPdQeHjY+2tu4ODOXld0FIYD++qUHMVp3cAWEy+aCGvR0q085pf Pw+E7TnmfbNbzOZyCK5vzblwGBxFZiNy7/nU6AwK+f4FSDTT723jFB2x4H71bL1qe+jArVfywKB /Yjhmr5gDLzJtWYgZsh1fZjeJHGocgfq0Vm8/ICHMLqqnWjDbN++TXoKGrvYA+2FQM3xNAzHX2u iFfChQRb8082OgT9lcYlBsoZp6SEgLVfmNP/dSPzu3NcyqbQAMxEhVbwCdF/tLBDi8X9+opnnN5 fc0P5SONFP51WLB0khIb39lOSA= X-Received: by 2002:a05:6000:42c3:b0:446:6d9c:a60 with SMTP id ffacd0b85a97d-452e7e7eb49mr6048164f8f.8.1778224354299; Fri, 08 May 2026 00:12:34 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.33 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:33 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 33/52] package.py: fix kernel module file pre-filter and document strip asymmetry Date: Fri, 8 May 2026 09:11:26 +0200 Message-ID: <9d64c63c37310aedaa82f86c2a4719f65ae26a87.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:39 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236675 From: Sam Kent Change the check to f.endswith(".ko"), consistent with strip_execs() and with the /lib/modules/ guard already present in is_elf() and splitdebuginfo(). Fixes [YOCTO #2348] Signed-off-by: Sam Kent Signed-off-by: Mathieu Dubois-Briand (cherry picked from commit 2f32e6a01cdd18c3a7ade348c7a50b0cd459590f) Signed-off-by: Yoann Congal --- meta/lib/oe/package.py | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/meta/lib/oe/package.py b/meta/lib/oe/package.py index 279cd567b31..c375acc1242 100644 --- a/meta/lib/oe/package.py +++ b/meta/lib/oe/package.py @@ -37,7 +37,8 @@ def runstrip(file, elftype, strip, extra_strip_sections=''): stripcmd = [strip] skip_strip = False - # kernel module + # kernel module: use --strip-debug and --preserve-dates (required for + # module signing to remain valid after stripping) if elftype & 16: if is_kernel_module_signed(file): bb.debug(1, "Skip strip on signed module %s" % file) @@ -1167,7 +1168,7 @@ def process_split_and_strip_files(d): or (s[stat.ST_MODE] & stat.S_IXOTH) \ or ((file.startswith(libdir) or file.startswith(baselibdir)) \ and (".so" in f or ".node" in f)) \ - or (f.startswith('vmlinux') or ".ko" in f): + or (f.startswith('vmlinux') or f.endswith(".ko")): if cpath.islink(file): checkelflinks[file] = ltarget From patchwork Fri May 8 07:11:27 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87706 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id B6338CD342F for ; Fri, 8 May 2026 07:12:39 +0000 (UTC) Received: from mail-wm1-f54.google.com (mail-wm1-f54.google.com [209.85.128.54]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.8241.1778224357006961761 for ; Fri, 08 May 2026 00:12:37 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=Y6At4KDs; spf=pass (domain: smile.fr, ip: 209.85.128.54, mailfrom: yoann.congal@smile.fr) Received: by mail-wm1-f54.google.com with SMTP id 5b1f17b1804b1-48d102471a4so16434095e9.2 for ; Fri, 08 May 2026 00:12:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224355; x=1778829155; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=MSb676aSbW7X/2KY64q40TVZZ3gDHS+Kpji8g68kSdY=; b=Y6At4KDs13pl11M1wt1GUBstC/Q1gVIMy6BvssWIOi1hcvIXSF7TVdg8lZBFE8hNYH L74snPUnHeCgGBzgpR1J2dJI/iQvKat0BHISBM4IZz1KlPZQhiSlhVbzhNsTNlEdKWAu y2h4d5VmcxDpNCNuD/GUIEJcjKX+VX3zAf3zc= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224355; x=1778829155; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=MSb676aSbW7X/2KY64q40TVZZ3gDHS+Kpji8g68kSdY=; b=c7NnQWlr/dD1QYawKYmQ+PDY57BgLhb849tdpo0fcRv8eqU19cs6IX8Dh+L6qglG2K zapNEebKOOMt8YfvGG4y6GIJBtG+TCphUEU1MsAx9d6Wx+p7P7Q5BdWjThKjdNY952uJ o7pYNR4Nr4fWIQnRu7C1qhT3wqDKv1bjQqIzT0y9FVUt+zvVLd7Ctr33YDv7KJsav+S7 qYMHJUijF9fXaODWfeLMteOFIKRspCDd3zlXAo9VfN4cN9D5mzh6VxytEnSxtpKRsWXW 7h992GE0CXnEBom+lewNPFGQQ9wFyXDudlUWd66ZISEHsqKHAib6AsRT1tvzkFmNsovf zPkw== X-Gm-Message-State: AOJu0Yzy6XQrZdMbwOb6/UH+V9DfeZ5ocQnHWGBbJprKprXNShr2exnQ nL3qRQwNg8cJljfE0PdMa8vuc9WE+C3z3YGJ6Y8d+ocHi/j4SmX1crnTfNEyqpF6BzDMHJKZ1fh DDHoSaF8= X-Gm-Gg: AeBDievYNF8wpZy6kAmGOWSQepUV7F8lAaKUqT48D1jzXnCHqGFCrnhHdDQfLOFfYnE osiklBx7oHeZpH1lTSCsj13OCYeShcyy67/lGwn/wUSs9dsLb+qEK2wH7pgQcrGoYEafVbgI8Tp vogDto1YDg6Hld4rXWRrL2p0qR2VcPi5QJMCRtoIg3ogQRIGffPZKC/p6jazoPNzju+YkcVhaki U0AYB4sphsoJjs1tkUWvxr9d+rbsBAJp0MBRzz94hYtV+GwXS3LAR2I6O+8K7X7kMeRIsrNPYas OsSBR4OfWv9Uu0M2ixgcY/r7iQfTgQCetyewsqtVHQcYy2DA7LfZroKBFkgVBMPdUaeBRLXv5p2 iqBcs0kxBoyV31kXqvHeZEpG5fRZ49NRPv0E0LDskU+vMRYJl3MemtMFzvaEJQAaY7qYlBh3DWt eP3xdn8l2YF85eLxw8M1tbDBa9GbuOAkzTelw2FU7cylC9BCd704SA80pPox9bY2x6qF1FmR+o3 +N3EwXQ6L4a0P2Ear+LKjN6C6uILsDA7LurrQ== X-Received: by 2002:a05:600c:c10b:b0:489:1f3e:5f69 with SMTP id 5b1f17b1804b1-48e676ab390mr17013145e9.18.1778224355029; Fri, 08 May 2026 00:12:35 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.34 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:34 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 34/52] ffmpeg: set status for 4 CVEs Date: Fri, 8 May 2026 09:11:27 +0200 Message-ID: <615bb2b4ff6cd8903b1dfabaa53aa37d04deaa67.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:39 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236676 From: Peter Marko These reappeared after update of sbom-cve-check tooling. Fixed version found by links from Debian security tracker. Signed-off-by: Peter Marko Signed-off-by: Richard Purdie (cherry picked from commit dd3cf15cf7b065f5f74fafd3c1450353cdc301c4) Signed-off-by: Yoann Congal --- meta/recipes-multimedia/ffmpeg/ffmpeg_8.0.1.bb | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/meta/recipes-multimedia/ffmpeg/ffmpeg_8.0.1.bb b/meta/recipes-multimedia/ffmpeg/ffmpeg_8.0.1.bb index 7bb7de3d25d..b6d3ceb6dc3 100644 --- a/meta/recipes-multimedia/ffmpeg/ffmpeg_8.0.1.bb +++ b/meta/recipes-multimedia/ffmpeg/ffmpeg_8.0.1.bb @@ -176,6 +176,10 @@ CVE_STATUS_GROUPS = "CVE_STATUS_WRONG_CPE" CVE_STATUS_WRONG_CPE = "CVE-2023-51791 CVE-2023-51793 CVE-2023-51794 CVE-2023-51795 CVE-2023-51796 CVE-2023-51797 CVE-2023-51798 CVE-2025-22921" CVE_STATUS_WRONG_CPE[status] = "fixed-version: these CVEs are fixed in used version" +CVE_STATUS[CVE-2022-2566] = "fixed-version: these CVEs are fixed since v5.1.1" +CVE_STATUS[CVE-2025-9951] = "fixed-version: these CVEs are fixed since v8.0" CVE_STATUS[CVE-2025-25468] = "fixed-version: these CVEs are fixed since v8.0" CVE_STATUS[CVE-2025-25469] = "fixed-version: these CVEs are fixed since v8.0" CVE_STATUS[CVE-2025-12343] = "fixed-version: this CVE are fixed since v8.0" +CVE_STATUS[CVE-2025-59729] = "fixed-version: this CVE are fixed since v8.0" +CVE_STATUS[CVE-2025-59730] = "fixed-version: this CVE are fixed since v8.0" From patchwork Fri May 8 07:11:28 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87705 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 9EAF1CD37AA for ; Fri, 8 May 2026 07:12:39 +0000 (UTC) Received: from mail-wr1-f44.google.com (mail-wr1-f44.google.com [209.85.221.44]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.8242.1778224358202547357 for ; Fri, 08 May 2026 00:12:38 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=en/QflDz; spf=pass (domain: smile.fr, ip: 209.85.221.44, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f44.google.com with SMTP id ffacd0b85a97d-453903ee4adso1139283f8f.3 for ; Fri, 08 May 2026 00:12:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224356; x=1778829156; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=KZlvH4Qlxr4pfTNI6JPT04GlFfYyBBmRxIhweEJ1SXY=; b=en/QflDzefl+/kQXpgwAI62uYfFnaqCz/3RSEScsuRlXkNYTinp08VE/BBkcL9Uned LZUw8ixMfcmm2IMfSEb6DKgK71kcjloFs6X2MLeGmrA9sGzqlSlKSRBbqKd5W2QF2jnh TnXOmsIo5rVbsOf3qYQm13Ly3gMX+WAaFN5kE= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224356; x=1778829156; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=KZlvH4Qlxr4pfTNI6JPT04GlFfYyBBmRxIhweEJ1SXY=; b=BmxYWOYlsS5OBwD1R84Ni041ARv0O03HDwUpNSfZBKyGjGF/USqqSjGqQnP6QihPdS UjCoOXeiFZS2/C4G9NDb7P92jSKEJb2VCtuRBpiFTASuFZmKxg2vMkEJ2USOf52Mtwbl urmvKIxtYQ56DXUV+gA5JcpvOsblXb/APGhrY/NFbpTETVsF4eNB3esMSk4XhTBf+frY 2uS25Ttjl/W3h87keu5n3aSpGBdgQL177ObNUXvdpirgmmt5lPYXDWABYWmV0mHhVuRF aNZlbWeWo2K17mkj1Y+vvQ7NhirBZ47LMv+vUaESmmZfTxM95QQwpx/ny9+I93/H0zve 7yyw== X-Gm-Message-State: AOJu0YyAXpUygbNLTZfRYv5yZyRFvyy8ra6Dtk4DxmbTzOhhf8yArodL I0v2lJmiAq/eR6lbyg3nNn51U2v3Tr8f+4r66/WUdkDskVCPWN742KBXMOV7USZ70FhyMAiZiw5 g/VVleeM= X-Gm-Gg: Acq92OGEwUL6T/4gdSrbdfa3ceOnXUwP8RSLuP6vqx9V+jYubG5RIADxGDnUF5LkAg/ AbwuEGnN5PmfmJPQvOYcOI3C6cHpwXXoe1zWFeo1V8Vn4z6CJDfFQhOfARBIxd2ucNiUE+ICGoH L6GVQldSJ4Oc1i3l3bRxdZakRXGalwnz4IJvw3UBG2P+FAKc/JN9FfwwPZIZy13x57lmfg1aXwu 5JvpeW1AdwTnP54jvktWFPhnMk8i6LMMmelJwcR+L9UDdDhhadL1745w0zq/m3lxpTlnsrFf/X6 RoHn6s8VhHvKwKrXJM4Z/R/g+FSrGkTmLuSpm2/dDKO4WMkGqPDR4qZ+IUhKTNv3TAPqRGmN2+r MmjK1RD4v2bceoeaN3iWYa1Sgasf9bMGpEs/s2T2md0q63ODb28xQtBlV5xTmWywZ6bbs3mMuXY /f+D9z/NkVx8LWmz7UOyFPlwugdgfnKWe4pj/JhBgR9uwDcHyKwbs/BhwkH2qVt2TfjY4BdsRP4 tA0XEIUsBSXekHjTjuaEz9LhDOBFLljCJvA5Q== X-Received: by 2002:adf:e54c:0:b0:452:3677:3fb3 with SMTP id ffacd0b85a97d-452367740c4mr9762468f8f.1.1778224356174; Fri, 08 May 2026 00:12:36 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.35 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:35 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 35/52] pseudo: Update 1.9.5 -> 1.9.6 Date: Fri, 8 May 2026 09:11:28 +0200 Message-ID: X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:39 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236677 From: Richard Purdie Pulls in the changes: * Makefile.in: Bump version to 1.9.6 * pseudo_util.c: Fix symlink processing for symlinkat and related * test: Add test symlinkat and related * ports/unix: realpath: Fix chroot processing * test: Add test cases for canonicalize functions * ports/unix: fts_open: Fix chroot behavior * ports/unix: fts_*: Certain functions were incorrectly returning stat data * test: Add fts test case * test: Add test for linkat chroot path stripping * linkat: Avoid a segmentation fault * Only copy xattrs on a rename if it's cross-filesystem Signed-off-by: Richard Purdie (cherry picked from commit 50e769a598e79ed4600f7362d5f40799a48f9273) Signed-off-by: Yoann Congal --- meta/recipes-devtools/pseudo/pseudo_git.bb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/recipes-devtools/pseudo/pseudo_git.bb b/meta/recipes-devtools/pseudo/pseudo_git.bb index 8c16aa71355..b118f436db8 100644 --- a/meta/recipes-devtools/pseudo/pseudo_git.bb +++ b/meta/recipes-devtools/pseudo/pseudo_git.bb @@ -12,8 +12,8 @@ SRC_URI:append:class-nativesdk = " \ file://older-glibc-symbols.patch" SRC_URI[prebuilt.sha256sum] = "ed9f456856e9d86359f169f46a70ad7be4190d6040282b84c8d97b99072485aa" -SRCREV = "0bad85523ff71f1a84cea5fdf72e7f560c4aeed4" -PV = "1.9.5" +SRCREV = "7109ac1b417cd31e0100f6e1c4f3e5743541b9ed" +PV = "1.9.6" # largefile and 64bit time_t support adds these macros via compiler flags globally # remove them for pseudo since pseudo intercepts some of the functions which will be From patchwork Fri May 8 07:11:29 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87704 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 9020ECD3436 for ; Fri, 8 May 2026 07:12:39 +0000 (UTC) Received: from mail-wr1-f49.google.com (mail-wr1-f49.google.com [209.85.221.49]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.8243.1778224358806807045 for ; Fri, 08 May 2026 00:12:39 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=KquZvWcH; spf=pass (domain: smile.fr, ip: 209.85.221.49, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f49.google.com with SMTP id ffacd0b85a97d-44509921fbcso891956f8f.3 for ; Fri, 08 May 2026 00:12:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224357; x=1778829157; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=E07ZQJTxwGeu9iWf0y32FayURW9NtCp2PfUG0wzyEjA=; b=KquZvWcHDroRkTW8bw5VLzrYHgGHXxlRIksGd/gE7tM5H0I63M7VKQ0oxp+/YkU/X7 X3rQUpelHuwdoMz/xNBr/LWaa3oKevQz5YVxjsn49aa9OEAKYQ60vw5pwHaBGDjmJeFP zWokQma4WlfNuFDqxeJ+tc8sMdWGN/snH9wPY= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224357; x=1778829157; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=E07ZQJTxwGeu9iWf0y32FayURW9NtCp2PfUG0wzyEjA=; b=W1TI+Wp57yc5dLIuQkuTqTwieVt+eZlvNi9FOcW5Bu20ZVsl+a28XP9ELiIQe7WcIV bsaCCaJxC7rjgos6ZgsGq7BY27Wgv99jbiNIglTAC9KuUm8C7Z8gwJ3tMe8RzbJx0X73 7qx1HHY3YXXhEV778sgnptPoj+YAX+F7bVGZXHTH3HUcdaouDn4eHqsxzBBdicSeAYfL FvcBkDG0V8KTQCGAvQot5DOIv4mghlbYxvU3PCeo7pPHCuwtqB2FJTRF/Nq4vzn0Or8+ Csg2j/aj/F+BPpEQ4hhO13K0hJqw5mXNWWlSaPLtmyqQppOVGSXqrjft1JP5qJezwu3O OXFQ== X-Gm-Message-State: AOJu0Yx8nly9aRl0DG9gInKeUd4A/zGziqTgp5epMkC+smn6P2jTQdv5 lO/669Mb17YQ8NHyFInGYdL/DyaT4lSjWL9ONo1vz31N3oTefDOK9Y4DAWl/DMXYhvXz0nyCJ1y dwn5+It8= X-Gm-Gg: Acq92OEs1hr24fe/71PezL8TSw2M3bBe7rjB4b8ix7M+dP0+QaSMKr9hfHJaNQEHQRq sS+GKUpr4PDjLjlsmpMgk6OSyxpLkb61OkY6qetrcMwMfot4ehSya3RbBb2vvSyknGZ7rePvbVi inWRH+B7WxpmdlisHqaBgzC0bdnFMJaWVizdKxqzux+4dUpEVvfz67SFW8CmP6txz9obegpKiup epYHXXzoptImMnDP7B8IqSylwuJQpzQzQVXnF8pNQ84qLDBJALNlwkQc4Ri0VYpFOI1dXa/dDCE DhleRADEa8imWiBG8XrwyeTbvLP5WITlGSoE5x1wDvG2qriW0ON/2egjJg1kBA3vjqJQeoPdc30 LndmrNqHuOe3kwzqVZ48t7wUob893jPb4V9jP+ZMQUM74KS4ZNf5Qruv2HJIVX8Qnmzqz7Z8Zgb KQtT9pyFtWfn5XRuZN8aiyLDVbX7Q4BDkwRN6RXSj+QIPN3QiMZPQpdEGp6jKKevZCqTzDPg+A7 w0aJtaB9FqxwyfId9fklRfOqd0= X-Received: by 2002:a5d:54c9:0:b0:43d:73d4:b34 with SMTP id ffacd0b85a97d-4515b525080mr13030894f8f.16.1778224356829; Fri, 08 May 2026 00:12:36 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.36 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:36 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 36/52] mirrors: remove inactive sources.openembedded.org URLs Date: Fri, 8 May 2026 09:11:29 +0200 Message-ID: X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:39 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236678 From: Antonin Godard It was confirmed these mirrors were inactive in [1]. Remove them. [1]: https://lore.kernel.org/r/b9c4ddd5ae72ae21ee0b6e12fb1a1f63661c685c.camel@linuxfoundation.org Signed-off-by: Antonin Godard Signed-off-by: Richard Purdie (cherry picked from commit 7a90ba800f50eed62032ce32261f92f7b77e1181) Signed-off-by: Yoann Congal --- meta/classes-global/mirrors.bbclass | 7 ------- 1 file changed, 7 deletions(-) diff --git a/meta/classes-global/mirrors.bbclass b/meta/classes-global/mirrors.bbclass index c8ceb9f5c4f..6f54b257f2c 100644 --- a/meta/classes-global/mirrors.bbclass +++ b/meta/classes-global/mirrors.bbclass @@ -36,13 +36,6 @@ hg://.*/.* http://downloads.yoctoproject.org/mirror/sources/ \ https?://.*/.* http://downloads.yoctoproject.org/mirror/sources/ \ ftp://.*/.* http://downloads.yoctoproject.org/mirror/sources/ \ npm://.*/?.* http://downloads.yoctoproject.org/mirror/sources/ \ -svn://.*/.* http://sources.openembedded.org/ \ -git://.*/.* http://sources.openembedded.org/ \ -gitsm://.*/.* http://sources.openembedded.org/ \ -hg://.*/.* http://sources.openembedded.org/ \ -https?://.*/.* http://sources.openembedded.org/ \ -ftp://.*/.* http://sources.openembedded.org/ \ -npm://.*/?.* http://sources.openembedded.org/ \ ${CPAN_MIRROR} https://cpan.metacpan.org/ \ https?://downloads.yoctoproject.org/releases/uninative/ https://mirrors.edge.kernel.org/yocto/uninative/ \ https?://downloads.yoctoproject.org/mirror/sources/ https://mirrors.edge.kernel.org/yocto-sources/ \ From patchwork Fri May 8 07:11:30 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87715 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id B6582CD37B7 for ; Fri, 8 May 2026 07:12:40 +0000 (UTC) Received: from mail-wr1-f52.google.com (mail-wr1-f52.google.com [209.85.221.52]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.8244.1778224359644975156 for ; Fri, 08 May 2026 00:12:39 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=kHK4eI5R; spf=pass (domain: smile.fr, ip: 209.85.221.52, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f52.google.com with SMTP id ffacd0b85a97d-444826c16ffso1480719f8f.1 for ; Fri, 08 May 2026 00:12:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224358; x=1778829158; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=IoGbV2KrM0sj6e+pfcEyUMy0Bs9exLsM+I8XkFj35h4=; b=kHK4eI5Rb0BrGWET//xzUy+GMpeCKX7FZR9clBfVd6cB1HKX3n3p6O5JNx/tIZSlpS +jPTDMf60DJvGN7jsseTnhZBG5u56e9QglCk/wLfjRK7nqwg2IsuHi+YxU7MdCweh7N+ 7PauJtpN9iezfJjSAR5ROJnEWGkt8/L5iYGW0= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224358; x=1778829158; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=IoGbV2KrM0sj6e+pfcEyUMy0Bs9exLsM+I8XkFj35h4=; b=jU9AU546CeZcPFXUDZIiNYvYGiKVcaaCVSa8cViLVxf4YliVlq/HNkwggpM2Hl04KM FSEng0LPUARbHn8XqgCntMVXzgndOdykwaJ4ph0QFM450PJydEQj+xepBRPMnsSo2cJv pnoV/XQoFejPW5Yq1sT1FINsu8xngHC1N0Z8rpYnRvSdF0l0FumuZxt/lVMQHZpvhJUL H+zH+wNtkqE4kwFvvvTBDoB+i/qvGILYoeTa99gsz3DcgQzyb40/h+zqzrKnvAA2jpCN y9i1IerbcDbM6cjw3maptsbe1qUUN7obwuFC0KPlM+W4hIdS/kj3cKjpK90lmn3gJArX +O6g== X-Gm-Message-State: AOJu0Yyx6CE30P9WnMSfxdbH7BU9+wwZqgTiekqbAcaBl25Ra7Q4F5kz VQCgmuMmx2AmbPDqJmZTd9JpxpTIUI71D3FnuJBw2wjsnlECZtbUwUDhlw+ndlZXNZXGADKZSJd Z2f1dvTM= X-Gm-Gg: Acq92OEyg07+TPgL1uoJnjGTgO1q9JPIDFjpMwmjFtx1Dz0vHaoWo7M7U/imfEySSYH RCCwl5U1PFdYAsR+NsgHSu+jA/HkOsv0qevPknGT4zASTqhCoqhwSWCNj+dWUq2ADNVXDYHYYGS keugJmK61Hd+EisiaeS519nwCS+oz12UX/gOfE7FACkgJnUDlgE2X5VI005ZGaozDKJ8C7nrrpe ZTBRkW08z9ZY5wNH4Wr4721+b3vYYnCid27xGptbSbx3lYThLV07/7FUBNOzR6cuABuq2AKiDUg AxPrY5Iz5DVu6OdX6Vtdy7tG4uBkmIAa4kdrB3fxEJkNGKe0HN4DQ3avp/S+7l+cUiNS2Yz0+y7 A7dGH0LZDxGWYbCR4Eo1uVOswezsqc+KyTlzjYtsuzHduh0gT61k5QsTDnP/WexdlCrXqp4agS6 0ulrydXOPQ45h86TCoCYImlLNBFBjb6YsS9gJNHp05jWmRyyW1WWiIMhZVFplqB341jbjO/xhXu 2JmLa2rzYtnC9wUVmEXo39cNwk= X-Received: by 2002:a05:6000:2c01:b0:43e:a73e:cc98 with SMTP id ffacd0b85a97d-4515cf11bb8mr16650920f8f.23.1778224357508; Fri, 08 May 2026 00:12:37 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.37 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:37 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 37/52] wpa-supplicant: remove obsolete explicit debug packaging Date: Fri, 8 May 2026 09:11:30 +0200 Message-ID: X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:40 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236679 From: Ross Burton The .debug directories are packaged automatically by default, so this is redundant. This recipe packages the plugin debug symbols into their own packages, there's no real advantage to doing this so remove that logic. Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit e5ff03b951ffb00b66a7812a9762315a99155d0c) Signed-off-by: Yoann Congal --- .../wpa-supplicant/wpa-supplicant_2.11.bb | 7 ------- 1 file changed, 7 deletions(-) diff --git a/meta/recipes-connectivity/wpa-supplicant/wpa-supplicant_2.11.bb b/meta/recipes-connectivity/wpa-supplicant/wpa-supplicant_2.11.bb index 7c7a8bd9c13..71bfb090a0a 100644 --- a/meta/recipes-connectivity/wpa-supplicant/wpa-supplicant_2.11.bb +++ b/meta/recipes-connectivity/wpa-supplicant/wpa-supplicant_2.11.bb @@ -113,13 +113,11 @@ PACKAGES += "${PN}-plugins" ALLOW_EMPTY:${PN}-plugins = "1" PACKAGES_DYNAMIC += "^${PN}-plugin-.*$" -NOAUTOPACKAGEDEBUG = "1" FILES:${PN}-passphrase = "${sbindir}/wpa_passphrase" FILES:${PN}-cli = "${sbindir}/wpa_cli" FILES:${PN}-lib = "${libdir}/libwpa_client*${SOLIBSDEV}" FILES:${PN} += "${datadir}/dbus-1/system-services/* ${systemd_system_unitdir}/*" -FILES:${PN}-dbg += "${sbindir}/.debug ${libdir}/.debug" CONFFILES:${PN} += "${sysconfdir}/wpa_supplicant.conf" @@ -130,14 +128,9 @@ SYSTEMD_AUTO_ENABLE = "disable" python split_wpa_supplicant_libs () { libdir = d.expand('${libdir}/wpa_supplicant') - dbglibdir = os.path.join(libdir, '.debug') - split_packages = do_split_packages(d, libdir, r'^(.*)\.so', '${PN}-plugin-%s', 'wpa_supplicant %s plugin', prepend=True) - split_dbg_packages = do_split_packages(d, dbglibdir, r'^(.*)\.so', '${PN}-plugin-%s-dbg', 'wpa_supplicant %s plugin - Debugging files', prepend=True, extra_depends='${PN}-dbg') - if split_packages: pn = d.getVar('PN') d.setVar('RRECOMMENDS:' + pn + '-plugins', ' '.join(split_packages)) - d.appendVar('RRECOMMENDS:' + pn + '-dbg', ' ' + ' '.join(split_dbg_packages)) } PACKAGESPLITFUNCS += "split_wpa_supplicant_libs" From patchwork Fri May 8 07:11:31 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87722 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id C66D8CD342F for ; Fri, 8 May 2026 07:12:50 +0000 (UTC) Received: from mail-wr1-f54.google.com (mail-wr1-f54.google.com [209.85.221.54]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.8245.1778224361033415782 for ; Fri, 08 May 2026 00:12:41 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=JXlFaS8j; spf=pass (domain: smile.fr, ip: 209.85.221.54, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f54.google.com with SMTP id ffacd0b85a97d-44a044cb827so1304587f8f.0 for ; Fri, 08 May 2026 00:12:40 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224359; x=1778829159; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=FvXiSDSQiPQIisnO6U0jndVhKJ1Ylm7Tdnjoxc7g02k=; b=JXlFaS8juK+/71QZv8CSAqCKKOyjKrUzJwks0F7PinEKmcV7BdT1J4ebYkD85HBhZp R7l0m9O7huFDt+wkYB2x6Rkv0dwgOMchlv2xi/CI/NxY6nZCI4bk6ffCQP7aPfM1qOqS 6cIX7FiaeGelVDuPhANxFA3Qp6RzVEI6erigk= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224359; x=1778829159; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=FvXiSDSQiPQIisnO6U0jndVhKJ1Ylm7Tdnjoxc7g02k=; b=Ebzo+eDjpJldAbuvlR4RaPmfVr5b4icAzDs0fNqX2yjGx5uBtnuSOpJy2s7zl6BiRr ++N9hB637Wnu02mZXmJGA+ilZxsIASe0GNMTUVmr5kS6aF1SnH9jsV7L+Zw7qCT5HGr1 8B2lirk24PcAMOXBqUaKpplDlKLMihSKPJUIOoRKFGWJvGpWxG6OmPTlPYJtwsMGsD87 p+qTXgFeP7Byp2Ox1AOhHETccN3wwgVRIHDm9VRz25SKukmdbOESPiYesxYXkUsjZPgS Z93fW+or9kEBocByNZJ7/qk3XUS8xExPNFWbH8d20NYknNAgxllykctCMbjbPAmMu5jS vhSw== X-Gm-Message-State: AOJu0YynixuWg6PPNl3yULx651EVviNgifHG92q3ZYnMBZYizer506Sr jAILqE3sG0SuaH/ZsmI/c9+7xOQNsdvxleio6vYBh2e8spZXyI6+0JRu0OVMwkBTnx5WPtH4M2G 25ZWDPT4= X-Gm-Gg: Acq92OEEksp68rInyO90/lVTLKazkYxkxAXDekFMCTupFkA5HWzcthlATBJ7S1ZGVqA pG7pXtX/8UIQUfDbAwS9BL/dV5LXXYkuj026Zyo+j9cUV+O3QlBONiygtazYR7Mwpsqx9KMBMeq WneReSJsHj4Fz5kf1x28UpfU8edzHSa5N2g6k8hYnOS+YIhFODH/e0joqxXm/bKjB6cf7aaadyO 2eUBhtwzt32/7BudUL89gMyU0IYu08Jt2svuRKLmpvy8wSvfEkqsUrPN7/w4VMSB0it16Rbfr+z N0SyBrHlPLcb7z4So/AuHCUQYwwyV4Fint4Anu3+d1gyUEgnAihFW4eZ0XIqbl8E//1HoohFPu2 EUCy/5GCYC0kPMm66iSMEFvVUuJSJziMC7gkF/V2i/5xx1zC+t8ZGUMpxHT8QIJb/KBj+nCLvJB uDVMKLftoD9GKVOzBs87FND5J8xCISplPU1bzH0xCyBgFOg8GaDoX0k5nrDTfGewsWycCeoyRQu WSbzVUc3hsEgww7fsmaCPzxKEs= X-Received: by 2002:a5d:5d08:0:b0:441:1e8e:d8fd with SMTP id ffacd0b85a97d-4515d3dc4d5mr18135636f8f.29.1778224358857; Fri, 08 May 2026 00:12:38 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.37 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:37 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 38/52] python3-cryptography: remove obsolete explicit debug packaging Date: Fri, 8 May 2026 09:11:31 +0200 Message-ID: X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:50 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236680 From: Ross Burton The .debug directories are packaged automatically by default, so this is redundant. Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 9c7c51f917cc72563c833f8e242eb34ad7baf1dc) Signed-off-by: Yoann Congal --- meta/recipes-devtools/python/python3-cryptography.bb | 4 ---- 1 file changed, 4 deletions(-) diff --git a/meta/recipes-devtools/python/python3-cryptography.bb b/meta/recipes-devtools/python/python3-cryptography.bb index fc5cb50b029..9387dd725a8 100644 --- a/meta/recipes-devtools/python/python3-cryptography.bb +++ b/meta/recipes-devtools/python/python3-cryptography.bb @@ -69,8 +69,4 @@ do_install_ptest() { cp -r ${S}/pyproject.toml ${D}${PTEST_PATH}/ } -FILES:${PN}-dbg += " \ - ${PYTHON_SITEPACKAGES_DIR}/${SRCNAME}/hazmat/bindings/.debug \ -" - BBCLASSEXTEND = "native nativesdk" From patchwork Fri May 8 07:11:32 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87730 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 68CA9CD37B6 for ; Fri, 8 May 2026 07:12:51 +0000 (UTC) Received: from mail-wr1-f54.google.com (mail-wr1-f54.google.com [209.85.221.54]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.8174.1778224362368441196 for ; Fri, 08 May 2026 00:12:42 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=yvVyMk66; spf=pass (domain: smile.fr, ip: 209.85.221.54, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f54.google.com with SMTP id ffacd0b85a97d-444826c16ffso1480742f8f.1 for ; Fri, 08 May 2026 00:12:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224360; x=1778829160; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=s2yMZWuN9JnyJMDQmh+P4F7yc4BMiGgCIltyzJ2Eq/E=; b=yvVyMk66JVsNXWDBWzNHPEkE8KRyoaC6Jyio3IoHj069LfTiOeFhSrPhfRHvIuaF1Y ++bwucmyrBf2dmsbIY4+GOBorIqbqBJie1Rd58s4+HHB8Y9BVMseKfuDa/eDC2+Vub9w bXq8GBhXBztGp7vHTfKE+bIIvZZ8ULTKE8RKA= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224360; x=1778829160; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=s2yMZWuN9JnyJMDQmh+P4F7yc4BMiGgCIltyzJ2Eq/E=; b=piCLcoymt4LQEQCiaTRH79RkqwYp2W3TwyZs9gJzinZr3vyfu1xe+Mfiiqnhj0RW3T HeHqsvHSuInEET7QFiJXQ46iJDFhx6rbdwDEUK1q/6xKpHDFXiPb8sTcBp2gPjLn7nMQ UngRQRwat8VJXP74kTvF4v7zuTl7Nz1NfS/4ka4ee3H/uZMcs4o2+bI5+VjQ7GskrcOt Sn3VeSESbPImDz2v52ULT1ahH+Y8uj31QJ2ful5QsU3VAh9048DU6vCawbuA5h/mYmY9 C4lOwtSHK3pu7+s+Y7+r8IEuPTJs8se5gI64j+LhGgKYw5uNKndcAwQ9OeCqKlJvtNJP KAgA== X-Gm-Message-State: AOJu0Yx+bFmGVgfJphnLh0qA+wuEQS4b806NDYg+9XPkrFUSgtHUZEdn hiEgCfq+lf2OxOM9IgYL7rz/51l2AaXxRG6GMuKdaofYS6g8ylrBlgXQIGfwrqLvXhtJbEAbeF4 IQ+i8NwI= X-Gm-Gg: Acq92OHdpAyzyEp7kSN63gTOzE+HmJcR5pSNlOhcPIUfy69YZq12acsBAnHokMIReoI g8bBWQ2f7tNCA5o5DvMck6KBpkrZ5Nqvu4wdJ7UAF2YH5aK3r367uQAokEj95uu1JRba5lJIjGo kDlIGP+jP7X8tIMkxz/q1/eR/sBlrcrCQnMohOs+LOLVviHozu9+xugxn08NYbVa+Lwp4PJZo+x zUKd8sDaUCHHBM4eckuZp63sB2VvbRAOuX13/7zuv5wGeJvf78NjyNhy2XNgA0En5taZf54k21t Hb4ahKKJzbPoH8txJs5Da2EBrfRyGotanxszY0y1X7yODNZp1y8WTZVlEEXwUHPJDk4u/5AfO+6 W5DB28YDdWI7jE5e7eXEye37nSpbWgIHbaQ74cHRiRzVzdCGuXhOnqf3osO+YpMhhRbUVB6WFFH IMv393qvRM2/aYEVRyLCk6Qorz90YICxmlJMLkmokK1sk61jJ/sZb0EVjs6WYSoeehSuzkYTkci kO/JUfgqbmtK30hYD4VN89Iyxwju6H1TtDfng== X-Received: by 2002:a05:6000:4313:b0:454:af3:33a0 with SMTP id ffacd0b85a97d-4540af333d1mr3814006f8f.17.1778224360286; Fri, 08 May 2026 00:12:40 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.39 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:39 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 39/52] gobject-introspection: remove obsolete explicit debug packaging Date: Fri, 8 May 2026 09:11:32 +0200 Message-ID: <4830d64b30c9a92fafefadf98660a1cf7314e87e.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:51 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236681 From: Ross Burton The .debug directories are packaged automatically by default, so this is redundant. Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 4612565dcabde01b6fe9b741da29ccbe75c99cc2) Signed-off-by: Yoann Congal --- .../gobject-introspection/gobject-introspection_1.86.0.bb | 1 - 1 file changed, 1 deletion(-) diff --git a/meta/recipes-gnome/gobject-introspection/gobject-introspection_1.86.0.bb b/meta/recipes-gnome/gobject-introspection/gobject-introspection_1.86.0.bb index fbba8fd6ec4..51cae5fff60 100644 --- a/meta/recipes-gnome/gobject-introspection/gobject-introspection_1.86.0.bb +++ b/meta/recipes-gnome/gobject-introspection/gobject-introspection_1.86.0.bb @@ -195,7 +195,6 @@ FILES:${PN}-dev:append = " ${datadir}/gobject-introspection-1.0/gdump.c \ FILES:${PN}-dev:append = " ${datadir}/gobject-introspection-1.0/tests/*.c \ ${datadir}/gobject-introspection-1.0/tests/*.h" -FILES:${PN}-dbg += "${libdir}/gobject-introspection/giscanner/.debug/" FILES:${PN}-staticdev += "${libdir}/gobject-introspection/giscanner/*.a" # glib-2.0 is required for libgirepository From patchwork Fri May 8 07:11:33 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87726 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 4D9D6CD37B4 for ; Fri, 8 May 2026 07:12:51 +0000 (UTC) Received: from mail-wr1-f49.google.com (mail-wr1-f49.google.com [209.85.221.49]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.8175.1778224363136602107 for ; Fri, 08 May 2026 00:12:43 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=QsoyIXVF; spf=pass (domain: smile.fr, ip: 209.85.221.49, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f49.google.com with SMTP id ffacd0b85a97d-44c4cc7c1cfso1342796f8f.0 for ; Fri, 08 May 2026 00:12:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224361; x=1778829161; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=YBw4o/7QlBn1RJaatOfj5vUW5J7M2wrg+WA9IWntE2s=; b=QsoyIXVFujEEL+n69yzC+DRxuBHcPMOqrxMxtQOTUnpXK16+aH9ENrosm2jT0n0+k0 y1B+9ZkwH3+WgephrV/h1qN/4zwBzXYcrlCUL0chRRcmGecUjWSL9Ic0xOEYbN6R7//5 ZSA2qqneifaZJYt0wsBXn9y2jcFVTNqE78NxI= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224361; x=1778829161; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=YBw4o/7QlBn1RJaatOfj5vUW5J7M2wrg+WA9IWntE2s=; b=Z8yHs7YtwnEOBxoLtoIS/CNf+J3oZrYtr5cyxYV57+8RrEZOnLqwYBVIb+VL4cEJmE vA/l4gkolF2Eci68JW41edFjZ1kxZ3wq7Mqr7pyi5M/rMFKJeQa/YxiUIcaXfppm+B5y ZfAWwwIkGzg8pfwjTC41v2PoD6fVBa2lhJVqglhpwKispVK6za+XYnTmOMJRbfzK4vNH t+tPgLTjIwuQg7QXUX5Wf/OpZL0mlmOOvNoJE5hfAvVgtsb+ombxTsd+FgM5pAysOCAb XfA8GGg7Wmy9hqFNcJ7iYEfeVKXa0p7EA0zRuvgGwEwx5RSEGAlIeUCvdwlmoaX+kVHX HY7A== X-Gm-Message-State: AOJu0YwSJgtGvevW1iTVlHwRxrcQm1SG8TlFVP+RRFuXFuRDIrSUMsc3 p2Knl/mus1bN4G+THH9EDBIJtahtgTsWzRYwxLWaFmJd4NxdMwWqlFszqUcO1KwUqghggA3hAAi r6rg+yoM= X-Gm-Gg: AeBDiev5DYwVI4JEATSdvLTbRi/SLM7Qy/9HcuTHkEZxPqiTtHt6PSe3qqKAF+flEBY Lxel1DJQS60LufI9LftUZMmr+N8ZY4dO9k9bvRERggvn45/mXOBw3Ct2T1YVCYzRIVfP6PzSij7 H5QQBZd64iRvpFNryiNDxbYUN0V3KnL0pxlBb26ZnFc7z2VaZr6peTyiqnIMCyWMlhBb/8R1IKL TewINSGtQVfrcY5tvto+AyLCXILiCAcNck5PWtfj9cu5vj1fMVlR4q6aqwQ5nkinVuPkxn/G3Ot QwyxGXdh5rYllGwjFUYL1apiyXOH25/BYdX+z2AD+fPBXBgi1XYfUjG0IA8ENp9rbFnlm9eMm00 s1WTU3lyGkoekMKvTloA0l6Ly46uS6YRgldRSXtrFhKMGMZnO/ewPMO0CK5OAvw24sPhUjeRUFi 6gfn/gi0Uut9XOsLG8B4k4/fbcQaTS4RDkUc5u20AOAa8cGa1T5dB+KuWVQKfsMffGw3+r4pT2r Fl5I1ftluXDqJ8YaHiAhFkMmZ/CHZvOn1Hqyw== X-Received: by 2002:a05:600c:4e0c:b0:48a:54fd:54ea with SMTP id 5b1f17b1804b1-48e51e21378mr193120955e9.12.1778224361011; Fri, 08 May 2026 00:12:41 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.40 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:40 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 40/52] kernel-devsrc: remove obsolete explicit debug packaging Date: Fri, 8 May 2026 09:11:33 +0200 Message-ID: <198e47ca1292932a87bb7c2b290ca32f0c5924d5.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:51 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236682 From: Ross Burton The .debug directories are packaged automatically by default, so this is redundant. Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit dbe335c6c1f1fe8fe72c72d9f7cfec58f3ab1c2a) Signed-off-by: Yoann Congal --- meta/recipes-kernel/linux/kernel-devsrc.bb | 1 - 1 file changed, 1 deletion(-) diff --git a/meta/recipes-kernel/linux/kernel-devsrc.bb b/meta/recipes-kernel/linux/kernel-devsrc.bb index 62f5df7a01a..237dec6b128 100644 --- a/meta/recipes-kernel/linux/kernel-devsrc.bb +++ b/meta/recipes-kernel/linux/kernel-devsrc.bb @@ -429,7 +429,6 @@ do_install() { do_install[lockfiles] = "${TMPDIR}/kernel-scripts.lock" FILES:${PN} = "${KERNEL_BUILD_ROOT} ${KERNEL_SRC_PATH}" -FILES:${PN}-dbg += "${KERNEL_BUILD_ROOT}*/build/scripts/*/.debug/*" RDEPENDS:${PN} = "bc python3-core flex bison ${TCLIBC}-utils gawk" # 4.15+ needs these next two RDEPENDS From patchwork Fri May 8 07:11:34 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87728 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 41322CD37B5 for ; Fri, 8 May 2026 07:12:51 +0000 (UTC) Received: from mail-wm1-f41.google.com (mail-wm1-f41.google.com [209.85.128.41]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.8176.1778224363722245409 for ; Fri, 08 May 2026 00:12:44 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=CnbzM3G1; spf=pass (domain: smile.fr, ip: 209.85.128.41, mailfrom: yoann.congal@smile.fr) Received: by mail-wm1-f41.google.com with SMTP id 5b1f17b1804b1-4890d945eb4so17462725e9.0 for ; Fri, 08 May 2026 00:12:43 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224362; x=1778829162; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=/hMjosRW1ZOkGwfzK7iSbOU6yu+cqn9wiQ3TMQS3tTI=; b=CnbzM3G1mchm9CTvNH7bN8VzUv4gS39Ue9u+mbFUlbUwcf2MFN2E7umcqcv2ufIIw3 B5/JF9rNtZDfeMh+/1d8zC+AmQF/hCHFhi0nnxLpQ//RXBQVxIA4TnY7ZsVKIp9cgqNu MBQjhpUN15vVudGtPqfdVJKfjk6yslxtbw5rw= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224362; x=1778829162; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=/hMjosRW1ZOkGwfzK7iSbOU6yu+cqn9wiQ3TMQS3tTI=; b=cP/KPlTTI4hJIvXhC711/wjN3wgpyhOZ9MgYLGwHn2pjYKWM8ZL3eocTZI6CvMCFlq P2N1GxEF8TWxh3InrAhh1FPB1u2DWg4ewadcLTQY58rKdM9kwn2sFuSMaMkewlMm3WCD M8nTh24Dnw4EhuhkE4nL9bPplHo7CPX6g6VmutAMH0E/TeuBxJDFScedLGgZrc+9VCxy icrgeP4nZiMy0Bu+3pGB28o3zhCAmKS1PWZF0j3zHehk+bdWhsVJ5czO9CW1L6hLljxv Q025IMstYTR/5r6Um1zlCt/7Bd6qy4kEGREfTLcakUEAo74Q5n36z9Rp2VnfRBF/I1IK Coow== X-Gm-Message-State: AOJu0YzRIUcmciVmC+s0PCyyiyyWGb1DF9RC1mMS99n3WF949Q+Lnvcg ZfibDMKGi4kQU9CB5SLWmhy/6WuhycMLN32ZFG5Z9v5WT1BgfXLoO05Ub3IohatnRk7U96DUPwA XtQajWnQ= X-Gm-Gg: AeBDies8WrUOs5kXlHliF6yIe+Df2n6daK8ok+aUkvwp/uSLwCkWJCIWeunCbWVugUT r9buS8gxF+pojAZMz5lMD2Dh54A4O2JkwYeVBbLZrMwuV1UD6loRahojPoT1pshVFk0CPeXFRas kIh9Ou9IuWXGwcoXISyRP/ydeUma8zVjNO5RJdqHkGvhjTP/LEUetpQfHHoU3/yZEgOJbWdCdht LdOEYjvJtdqIizjmEQyHsGU6Anywf70KUoC/FcIa1DPf6EwiNmyzLoHpyJRcTJdQBiwOiTOqSQs 1H+ows0oCvCl+n/3grKrqiXgcPKVQdH/TIJsaAJMYO7AcwrjjJkQlqxrZl/JVOjFQFtyEGWv565 uSjlKTnGbR8bF7nZf6BuzFtog5DbnFcDmeIAklJgyDybgj5ugkveE1gmfvDAIItViKHpKkY2Cp9 9aGUnz9+OXdejuNVHjPf+vRG4Tn31N/93ndXI4mqzs6/ivewarBBxQYJ8VmZxL5p/ZcBdGabEae oBjB5Ww7FeJ0Kxsdkbu9OaCX3HmhiBis8K75Q== X-Received: by 2002:a05:600c:638e:b0:48a:53cb:8604 with SMTP id 5b1f17b1804b1-48e5e00c1b9mr94408685e9.14.1778224361766; Fri, 08 May 2026 00:12:41 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.41 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:41 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 41/52] coreutils: set CVE_PRODUCT Date: Fri, 8 May 2026 09:11:34 +0200 Message-ID: X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:51 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236683 From: Peter Marko This removes rust uutils coreutils CVEs from reports. Comparing sbom-cve-check shows that only CVE-2026-35338..CVE-2026-35381 are removed and all of them contained reference to uutils. Signed-off-by: Peter Marko Signed-off-by: Richard Purdie (cherry picked from commit 5c39687f62e5864ea783cbed497c2eb5387dcf96) Signed-off-by: Yoann Congal --- meta/recipes-core/coreutils/coreutils_9.10.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-core/coreutils/coreutils_9.10.bb b/meta/recipes-core/coreutils/coreutils_9.10.bb index 984c5b5292b..8109244f446 100644 --- a/meta/recipes-core/coreutils/coreutils_9.10.bb +++ b/meta/recipes-core/coreutils/coreutils_9.10.bb @@ -19,6 +19,8 @@ SRC_URI = "${GNU_MIRROR}/coreutils/${BP}.tar.xz \ " SRC_URI[sha256sum] = "16535a9adf0b10037364e2d612aad3d9f4eca3a344949ced74d12faf4bd51d25" +CVE_PRODUCT = "gnu:coreutils" + # http://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=v8.27-101-gf5d7c0842 # CVE_STATUS[CVE-2016-2781] = "disputed: runcon is not really a sandbox command, use `runcon ... setsid ...` to avoid this particular issue." From patchwork Fri May 8 07:11:35 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87725 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 2DAECCD37B3 for ; Fri, 8 May 2026 07:12:51 +0000 (UTC) Received: from mail-wr1-f54.google.com (mail-wr1-f54.google.com [209.85.221.54]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.8246.1778224364394649698 for ; Fri, 08 May 2026 00:12:44 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=wIqmKIaA; spf=pass (domain: smile.fr, ip: 209.85.221.54, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f54.google.com with SMTP id ffacd0b85a97d-43d73352cf2so1333748f8f.1 for ; Fri, 08 May 2026 00:12:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224362; x=1778829162; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=AcA8VhQK6dZ2vT8dDQuwEFoSQ/atHnniPRJ9AH2RI4U=; b=wIqmKIaA+xkRJlSFkFrjA+AQfTLP9kmQyryGVhid23+4VUwBMuMpPNL2Z3on6wJDl5 z7klIk5ht6ruVG1oo5fLF3Fbs+zbraVti8QeqDAngJxkcRfUPxXl2wPauSsXr2otPtOj 0fsL68cXiiRPPzketAPYJD5o7G/LvJZAI/sB4= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224362; x=1778829162; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=AcA8VhQK6dZ2vT8dDQuwEFoSQ/atHnniPRJ9AH2RI4U=; b=bTQlCc8FKqICH98vjh3J8m231D+7Uc5dccO9KXYNiYQcXSMhgEN4huXEPzeuMI2M6J kuTTro74FifRPAO1muKubuThXLaubBSsIkW4FfzF0R3g51bbIjmtDn8MuEbbHuewxR3f w/LpC554UbaGayQbkjcE8UOLKWYJN7q/Zy9CLi0yvCRmrBJnDJNmXub3hHI+A0XbpdcK LMhjLGB01fdaMZBn3U3sG14GsDuff5XzQka0WAJDuHML7jk+PTsV+0CuvWmbJMMfIZOT bbLys1in4eduD7qPSE0Qmi4A9cH392Rc1xg7J17p6tD8pKno0KZ0fK8Wue8TCB1BOzyg DAGw== X-Gm-Message-State: AOJu0YzQWGAYb6qPKyoEB1YflDDpP60gHpOHKfbOhhwHHeeGRntWTI9j 7B+xdtEI5WhXHmITrAqV6wjf29eDLl0h3umfYtWVFZYgGEZRnx2CBjAmyR4d0/ODhMBsZc6bLrA kQBlw5jQ= X-Gm-Gg: Acq92OHuMNzV3obCygCncFDgQZoPQGYAaNzSN7PygaGG+AD3ETgYaRCtWWGD38gHG8U IwhoJAlSQZqgwIAeHug+4R5vUZ0bSnpvg2D9WgW4De68kB4O3wgvpflqJrGaX0q6MN5Yx2dDPdJ 5HjwtCWCkklfdp2YSG7Npxe8JgzEDRV6QQC/IR+AgsU+ljLxLfytA4FA9W09MFwtkIbKHFASdiD hSC4VdDN913/fkXDTYUHTn1WMYjdSqu95wLoCA4YgU2vknx3xxNbCz9Bfhz7YYpTv0J0VXV7JuY XY1/0NTVlF7yj1Z1awANqnFYxNPw/ndBruJlJnoUBCB0eEo/iNY0LB0i903eJ8AVV2DvztnoAT/ v5MtLAhd7GPOCfx5ru9+9Pz/TZQgKLwfQmW8u/pZziWPyvWsaGdIf98qZyikhSo+fALNSLoPoH1 dl3yfosumyUfLqT3bheBuKZZ4948qXNrZ0SNHg3fE1Yx0ioV9qXARyK2Qg1ARxFs06AtDyy2hO3 +0WQEXiJrKBYEvawZ681AroJgg= X-Received: by 2002:a05:6000:2910:b0:43f:ea25:20ff with SMTP id ffacd0b85a97d-4515d3dc31bmr17461636f8f.29.1778224362351; Fri, 08 May 2026 00:12:42 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.41 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:41 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 42/52] libsoup: set status for CVE-2026-2436 Date: Fri, 8 May 2026 09:11:35 +0200 Message-ID: <562802eab2a4880df62f26589d1d922e832b788b.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:51 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236684 From: Peter Marko Commit fixing this CVE is [2] (per [1]). That was backported to 3.6.6 as [3]. [1] https://security-tracker.debian.org/tracker/CVE-2026-2436 [2] https://gitlab.gnome.org/GNOME/libsoup/-/commit/e9b681a5b23f8259a5e29c5351a5284ae5cd1189 [3] https://gitlab.gnome.org/GNOME/libsoup/-/commit/31052a2327c81fe3b7a3d4a66d8a7c9c1aaa47ca Signed-off-by: Peter Marko Signed-off-by: Richard Purdie (cherry picked from commit 83d00b9b4f89ba30cbac167575ca1ab4ad142b5d) Signed-off-by: Yoann Congal --- meta/recipes-support/libsoup/libsoup_3.6.6.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-support/libsoup/libsoup_3.6.6.bb b/meta/recipes-support/libsoup/libsoup_3.6.6.bb index 9bc3f2f86fb..206daa091f2 100644 --- a/meta/recipes-support/libsoup/libsoup_3.6.6.bb +++ b/meta/recipes-support/libsoup/libsoup_3.6.6.bb @@ -62,4 +62,5 @@ BBCLASSEXTEND = "native nativesdk" CVE_STATUS[CVE-2026-1467] = "fixed-version: fixed in 3.6.6" CVE_STATUS[CVE-2026-1536] = "fixed-version: fixed in 3.6.6" CVE_STATUS[CVE-2026-1801] = "fixed-version: fixed in 3.6.6" +CVE_STATUS[CVE-2026-2436] = "fixed-version: fixed in 3.6.6" CVE_STATUS[CVE-2026-2443] = "fixed-version: fixed in 3.6.6" From patchwork Fri May 8 07:11:36 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87727 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 209F0CD37B2 for ; Fri, 8 May 2026 07:12:51 +0000 (UTC) Received: from mail-wr1-f44.google.com (mail-wr1-f44.google.com [209.85.221.44]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.8178.1778224365587543464 for ; Fri, 08 May 2026 00:12:45 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=srgkY0BR; spf=pass (domain: smile.fr, ip: 209.85.221.44, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f44.google.com with SMTP id ffacd0b85a97d-44b052142e1so985977f8f.1 for ; Fri, 08 May 2026 00:12:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224364; x=1778829164; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=t6q4JOB+29Cq8GBclU0L7I8HAiP7+0Im4jCGzTnZQSI=; b=srgkY0BRlCFW4kd71HVPNVP/JZA+kK39/EHZY1uff6IZgsBZrISF+O1cm9vp6RWL3f Y/SWLvvx7Rcr8UFKOlnTen0V98g5pHxS7O+ijFxP1VVjolTPNnr8fUFKpzJdrfcUQNNz 8o63fFG9oL1c1X3Vrp6ypCgNaS+Ial9UnshoU= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224364; x=1778829164; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=t6q4JOB+29Cq8GBclU0L7I8HAiP7+0Im4jCGzTnZQSI=; b=i4tg6pLLKA3LK2S0l3CLEP6K+2SUbYVwraCYrm6AlVYe1O/jOkxmYMZPfrAO3tlHMt DtLzpPd+PDKDiFyIey0TUmeRWtllzeIL5amyM2kH8nKUpTt2GBEzmvy9GCgCibCpNIAC FxhZ0UNk//AiHY8zqYoYXI8TMZJMO958z3VczOTlP5JCO6pXvsm/Bh6Kw7EE8BxG5thJ 2SE+ymO8NIUC/hY05Axavw6U4s9BRxHEJArvoNnMaYdAw4udPdPO6dHLDtCoy9ha6i6v TZXk9O52yT7Y7lQQ6BOE7JltBTO6iuDiPmPmRbrD1q+QaBG8p6HSbdiFlxQaxOJIMnM5 CWDA== X-Gm-Message-State: AOJu0YyDRqVOLOKVJLV5ng0938XI1O0lV8bloBLpqWAsFGn8sLRncsLe lpFCE/B7oSTaPRSllAiuOPGLgRpCdh9ooW8UeO07aZvnwQLqbUpP73//Aab7Kd7L05rMkolQE72 5dpN8pw8= X-Gm-Gg: Acq92OEnrAmm8GMJRbl0WHcy/UlJBFQ3FPQBbuq8Piwu1NMMp1fycjdkHmrhUkLB5UI z26F2fSIOyEFySTsk8TlScKZACTg2/I2gLFIheyxD90LLr9KkrO/VKg815Sxezw1I9fb+urjjYa woUvD7G2BMAqdHYpQ8vc9s35a6YSNhAW9gfOQyVDw3BwVE/ltNKv+qFQ3/F3dUk2CGVLqcC0Gc6 DGI/qAVWDwIfVzjFQKv4NDAx52lDsEjAsTqdWDJqAQeFOoWnDKstZBqaQhg8GB5RUzdwxuTeHwW bCKjzdsYVvigX3nw+1eq5iflTTzWlWjhy62g6cirMnFEP8wUB9lVCR5VPY7gvy+wEKF9RaWlS4R yp5ADgTVZN1FDm/ZZoERMIgKXlGcotRHmT5wZSeZmX/vME76SUx1cjZn668j33Xy8LjQ5aCXEQM Zn3cuRBYR6nvAE1ooC8UcJdZHQazisaBiqVmKThV2PI5iFaICLnS9uUTz6BVUQkVPIbjmalhN7t ji7IiWbOViOtYHZTNFUMR4HRvs= X-Received: by 2002:a05:6000:2310:b0:43d:6f0f:32fe with SMTP id ffacd0b85a97d-4515d5c54a9mr16850933f8f.31.1778224363053; Fri, 08 May 2026 00:12:43 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.42 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:42 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 43/52] libsoup: patch CVE-2026-5119 Date: Fri, 8 May 2026 09:11:36 +0200 Message-ID: <5b40cc1b51f243d2bdb9d7e65da4922488e7afba.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:51 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236685 From: Peter Marko Pick commit which closed [1]. [1] https://gitlab.gnome.org/GNOME/libsoup/-/work_items/502#note_cb3be24d375814549d21c03821672ed6749df36a Signed-off-by: Peter Marko Signed-off-by: Richard Purdie (cherry picked from commit cdc9de40b460c65f642ff2d128f016b023ff170a) Signed-off-by: Yoann Congal --- .../libsoup/libsoup/CVE-2026-5119.patch | 122 ++++++++++++++++++ meta/recipes-support/libsoup/libsoup_3.6.6.bb | 1 + 2 files changed, 123 insertions(+) create mode 100644 meta/recipes-support/libsoup/libsoup/CVE-2026-5119.patch diff --git a/meta/recipes-support/libsoup/libsoup/CVE-2026-5119.patch b/meta/recipes-support/libsoup/libsoup/CVE-2026-5119.patch new file mode 100644 index 00000000000..f5e3f91b000 --- /dev/null +++ b/meta/recipes-support/libsoup/libsoup/CVE-2026-5119.patch @@ -0,0 +1,122 @@ +From b0626fff8538e3dd4a52f148d91c8348d51d64d1 Mon Sep 17 00:00:00 2001 +From: Carlos Garcia Campos +Date: Fri, 27 Feb 2026 12:03:25 +0100 +Subject: [PATCH] cookies: do not send cookies to a HTTP proxy for a HTTPS + request + +Closes #502 + +CVE: CVE-2026-5119 +Upstream-Status: Backport [https://gitlab.gnome.org/GNOME/libsoup/-/commit/b0626fff8538e3dd4a52f148d91c8348d51d64d1] +Signed-off-by: Peter Marko + +--- + libsoup/cookies/soup-cookie-jar.c | 24 +++++++++++----- + tests/proxy-test.c | 47 +++++++++++++++++++++++++++++++ + 2 files changed, 64 insertions(+), 7 deletions(-) + +diff --git a/libsoup/cookies/soup-cookie-jar.c b/libsoup/cookies/soup-cookie-jar.c +index 7e200f8f..6a996ffe 100644 +--- a/libsoup/cookies/soup-cookie-jar.c ++++ b/libsoup/cookies/soup-cookie-jar.c +@@ -885,18 +885,28 @@ process_set_cookie_header (SoupMessage *msg, gpointer user_data) + g_slist_free (new_cookies); + } + ++static gboolean ++allow_cookies_for_request (SoupMessage *msg) ++{ ++ /* Do not send cookies to a HTTP proxy for a HTTPS request */ ++ return soup_message_get_method (msg) != SOUP_METHOD_CONNECT || !soup_connection_is_tunnelled (soup_message_get_connection (msg)); ++} ++ + static void + msg_starting_cb (SoupMessage *msg, gpointer feature) + { + SoupCookieJar *jar = SOUP_COOKIE_JAR (feature); +- GSList *cookies; ++ GSList *cookies = NULL; ++ ++ if (allow_cookies_for_request (msg)) { ++ cookies = soup_cookie_jar_get_cookie_list_with_same_site_info (jar, soup_message_get_uri (msg), ++ soup_message_get_first_party (msg), ++ soup_message_get_site_for_cookies (msg), ++ TRUE, ++ SOUP_METHOD_IS_SAFE (soup_message_get_method (msg)), ++ soup_message_get_is_top_level_navigation (msg)); ++ } + +- cookies = soup_cookie_jar_get_cookie_list_with_same_site_info (jar, soup_message_get_uri (msg), +- soup_message_get_first_party (msg), +- soup_message_get_site_for_cookies (msg), +- TRUE, +- SOUP_METHOD_IS_SAFE (soup_message_get_method (msg)), +- soup_message_get_is_top_level_navigation (msg)); + if (cookies != NULL) { + char *cookie_header = soup_cookies_to_cookie_header (cookies); + soup_message_headers_replace_common (soup_message_get_request_headers (msg), SOUP_HEADER_COOKIE, cookie_header, SOUP_HEADER_VALUE_TRUSTED); +diff --git a/tests/proxy-test.c b/tests/proxy-test.c +index 68c97aca..945de2cc 100644 +--- a/tests/proxy-test.c ++++ b/tests/proxy-test.c +@@ -406,6 +406,52 @@ do_proxy_connect_error_test (gconstpointer data) + soup_test_session_abort_unref (session); + } + ++static void ++connect_message_wrote_headers_cb (SoupMessage *msg, guint *counter) ++{ ++ SoupMessageHeaders *hdrs; ++ ++ *counter += 1; ++ ++ hdrs = soup_message_get_request_headers (msg); ++ if (soup_message_get_method (msg) == SOUP_METHOD_CONNECT) ++ g_assert_null (soup_message_headers_get_one (hdrs, "Cookie")); ++ else ++ g_assert_nonnull (soup_message_headers_get_one (hdrs, "Cookie")); ++} ++ ++static void ++request_queued_cb (SoupSession *session, SoupMessage *msg, guint *counter) ++{ ++ g_signal_connect (msg, "wrote-headers", G_CALLBACK (connect_message_wrote_headers_cb), counter); ++} ++ ++static void ++do_proxy_secure_cookies_test (void) ++{ ++ SoupSession *session; ++ SoupMessage *msg; ++ SoupCookieJar *jar; ++ guint counter = 0; ++ ++ SOUP_TEST_SKIP_IF_NO_APACHE; ++ SOUP_TEST_SKIP_IF_NO_TLS; ++ ++ session = soup_test_session_new ("proxy-resolver", proxy_resolvers[SIMPLE_PROXY], NULL); ++ g_signal_connect (session, "request-queued", G_CALLBACK (request_queued_cb), &counter); ++ ++ soup_session_add_feature_by_type (session, SOUP_TYPE_COOKIE_JAR); ++ jar = SOUP_COOKIE_JAR (soup_session_get_feature (session, SOUP_TYPE_COOKIE_JAR)); ++ ++ msg = soup_message_new (SOUP_METHOD_GET, HTTPS_SERVER); ++ soup_cookie_jar_set_cookie (jar, soup_message_get_uri (msg), "user=password; secure"); ++ soup_test_session_send_message (session, msg); ++ soup_test_assert_message_status (msg, SOUP_STATUS_OK); ++ g_assert_cmpuint (counter, ==, 2); ++ ++ soup_test_session_abort_unref (session); ++} ++ + int + main (int argc, char **argv) + { +@@ -438,6 +484,7 @@ main (int argc, char **argv) + g_test_add_func ("/proxy/auth-redirect", do_proxy_auth_redirect_test); + g_test_add_func ("/proxy/auth-cache", do_proxy_auth_cache_test); + g_test_add_data_func ("/proxy/connect-error", base_https_uri, do_proxy_connect_error_test); ++ g_test_add_func ("/proxy/secure-cookies", do_proxy_secure_cookies_test); + + ret = g_test_run (); + diff --git a/meta/recipes-support/libsoup/libsoup_3.6.6.bb b/meta/recipes-support/libsoup/libsoup_3.6.6.bb index 206daa091f2..b36976a2be4 100644 --- a/meta/recipes-support/libsoup/libsoup_3.6.6.bb +++ b/meta/recipes-support/libsoup/libsoup_3.6.6.bb @@ -18,6 +18,7 @@ SRC_URI += "file://CVE-2025-32049-1.patch \ file://CVE-2025-32049-3.patch \ file://CVE-2025-32049-4.patch \ file://CVE-2026-1539.patch \ + file://CVE-2026-5119.patch \ " PROVIDES = "libsoup-3.0" From patchwork Fri May 8 07:11:37 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87723 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 10CE8CD37B1 for ; Fri, 8 May 2026 07:12:51 +0000 (UTC) Received: from mail-wm1-f53.google.com (mail-wm1-f53.google.com [209.85.128.53]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.8247.1778224365786266324 for ; Fri, 08 May 2026 00:12:46 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=2wlam30m; spf=pass (domain: smile.fr, ip: 209.85.128.53, mailfrom: yoann.congal@smile.fr) Received: by mail-wm1-f53.google.com with SMTP id 5b1f17b1804b1-488a14c31eeso11099265e9.0 for ; Fri, 08 May 2026 00:12:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224364; x=1778829164; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=ROUJiz5JCDL3JogXOKmozZYoKVn8B66kR+GDTPE4O5Y=; b=2wlam30mUBL6N2J0Jkp4iwrH7gfgoTHPiyg45vFRg46DVh+esEQe3vg/BBkS3ZESIL QSCc6n0jfj8juOkrn6PKi1bshHtr9PnmlC/5VW/2/Ugp05xQdeE56lMMZTdyOoeFkhmx iCn0gJGSm0SP/xfMbUF17OFkxQx4N1oypCdLE= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224364; x=1778829164; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=ROUJiz5JCDL3JogXOKmozZYoKVn8B66kR+GDTPE4O5Y=; b=AULJSipwkCj1QZQZPhNMel+GVIIQC66T4p55yNXaRLweUfLVzRKM0v/9G7seFGxRmy N4/ATKeS3+M6hTXnmbvES0MV3gO0AjDplBcBO4GAkmFUvnGuF+ZrM0u3UgrQMNnz92cu K2HARFOitksB2IExa6ilhvpsW6QC7tnHsnzgunUdc0ggDwDsJ61G0+GHv8YiSI8p5Y0M gxZ0URAcZoVfiPrs997xhjkuTCsmvBHcS5fVNZDIywG/9XSXKdVXNOBYw8fHY1m8d67O nMbcDZHzTrs96IPdaDwR2OYsLH1OKidervMykgOyP7EhE/rAWPDokfJvAxRwLDWLAME9 p0Jw== X-Gm-Message-State: AOJu0Yxob3dv/l5K2ug61Tu5LpuHyCtpvV/Z1WY9PDUtrV/KCBRat7Gn c+W7/YfLEKI5avPEjkVxUkXPiLKQ2h7CXgIcelpci9qQW/m7VEbVfC1Fw8a1qyMRxo+/w3KoAkn BQ0Mw3hQ= X-Gm-Gg: AeBDiesNsJxMXx2exYfzhK1Y2tiaL34lo17BrKVI5YyeJ1TpHOwG/WU3vSCAZfbrcFl +W5cIPRaQ0rHROQTRxg0sj8W38N7F5ZooUxRIyQqUhpLgV2jO5Fe9vZvtCtw3wjImsRoZHlnFQc NdOAr16KdJRCFHpxqUcUZZj3PG0KtZTZcppi47OD9NMveq40Zub75fRdlnuWYxifsSyswLgQEyr VdpOno9A7T5o5sL59WK4EF/iPQ15N1flmxAwnPUHxd/EbO0mwyzYyz59Z7E3ccIagzVAM56/GiA SXLalYsqiNvLVXTpdrzUxzgXVBAKu8vY408cWIwM3vo2vyBm+rWOwKpiZAWZ0SVa71ujjkdwV/J OoKHUkXt8WtZ93WYPwP8VfwnVeebwoDGyJyfbzIdxJ5ZVygnpmc1U0nxPSjGuaGg20iVuBtfuSR g/YsHa6CXYzgCzAjRUPX2/Kj5Yt/whjb//HCLOXMlHtC70U70ee1ygIEIDpRMDaLSeEwQ0aAtmU EYBoQlrdRzVWjJQz2mCq4MJzf8= X-Received: by 2002:a05:600c:45d3:b0:48a:563c:c8d6 with SMTP id 5b1f17b1804b1-48e6767dd6bmr21245065e9.7.1778224363642; Fri, 08 May 2026 00:12:43 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.43 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:43 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 44/52] dhcpcd: remove obsolete explicit debug packaging Date: Fri, 8 May 2026 09:11:37 +0200 Message-ID: <75b1a55adc6bab71bab8a3fadc0f1b94e87e5f8a.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:51 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236686 From: Ross Burton The .debug directories are packaged automatically by default, so this is redundant. Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 8c3e8394c53581fd6b1d69669f6e0668c5af9d13) Signed-off-by: Yoann Congal --- meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.1.bb | 2 -- 1 file changed, 2 deletions(-) diff --git a/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.1.bb b/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.1.bb index c940d6806a6..6a77ab9f1fe 100644 --- a/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.1.bb +++ b/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.1.bb @@ -63,5 +63,3 @@ do_install:append () { chmod 700 ${D}${DBDIR} chown dhcpcd:dhcpcd ${D}${DBDIR} } - -FILES:${PN}-dbg += "${libdir}/dhcpcd/dev/.debug" From patchwork Fri May 8 07:11:38 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87724 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 0229DCD37AF for ; Fri, 8 May 2026 07:12:51 +0000 (UTC) Received: from mail-wm1-f49.google.com (mail-wm1-f49.google.com [209.85.128.49]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.8248.1778224366952883089 for ; Fri, 08 May 2026 00:12:47 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=w/uKf0ry; spf=pass (domain: smile.fr, ip: 209.85.128.49, mailfrom: yoann.congal@smile.fr) Received: by mail-wm1-f49.google.com with SMTP id 5b1f17b1804b1-488b0e1b870so25606455e9.2 for ; Fri, 08 May 2026 00:12:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224365; x=1778829165; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=s1tuXbyO3r5Tij3n6tYKp24e+lvoZhLPSXnYLF6zc3s=; b=w/uKf0ryKF6UKXeIj6hB1kxdfxNkIib74NKQhfCzPaCg4Z2ELBeAMM4kTZqUIVYMel cQNwX0zdBjg8mA5rfEuEp1uMRu+n66ywKQVDBUTuEVru/162WHvJrmw6kEbfHCXBc293 DXNHF+lXvm5C2emni020giqrrEI3ssEA2DE+I= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224365; x=1778829165; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=s1tuXbyO3r5Tij3n6tYKp24e+lvoZhLPSXnYLF6zc3s=; b=W1I/1zE3Blyv0xr7CMPOYpSmKudzhJzuBmExETFFTcWNiWERjB+lDoAzdWXj6PGiQ0 yXoflmcGgk5yUFbmwWy42oQ59NL0e5icyKJcwSE9QEOk9AmbHGiN2DyaxbWyyLf+gXUK JLjfXbI1DYJ2SAupfBpon5mndBW6OJ2zQstObvbRaft4cu6tdOxudxyLFjM2NdTvb6P7 HxZO4hh/4rJKJNRrFNG3ijvqCM2DH12fyOQokph0/JxgXe9LIOszbdDaKzURRm7UYFzI V8NMlmiy/nObd+fRp3H/JFGjs3ZY4TtCqy8USJbM5aqY1duyuskG2aGRAKG4FmohWxlA 7tBg== X-Gm-Message-State: AOJu0YxyDmcS2U30cop7hujI18VEQLwawcvQkDXsgpWZTaTmBrS8F6U/ Mp8Hl4N7cBHs9Pf57X64si/M+ROElJHL29Ix0PmH22VK8oUpcqpxL3VKw/khHhsUKgFdnEHEoG1 p0/m9ABc= X-Gm-Gg: AeBDieske+AqlmDInkL0LDPuovIY9xN0xJT0QFv2E6yaZsEhZo8w57IJ5grSl/UyKkv kFANm0S2jp+HYph6KlpEt547azxCQ/EiTPqeb0B57qBCtxz2PQxFJaPhqeEm4LvwVdMk5kqoo+m RPkIrnLHdYxeWVRzaXR628vzdpL8jFXLXGS7GWRcQMpeMK+YyfNC+diQJH0kFtD3xPelNQx9ypH 2bVFJ6USyaDuu9l2icdh3DPWMK/aU+9ZlZyOi7r83xGO7jRX92lroDzepQkSnxkB6N59tbrd7IY M6EZ2wq1Qs1Ok+GsELYGX06n9L57QIPyq1OI0rgstJc4rK2j7m1YkQIes3tZa/Sq9UvtYmaX7Jb hJ5iR9VZwv7aFTtcWFLvCUXoT5F5HOmwVQcJikdlje02tA2ygSz7D1vQWQieHE4cabEiApUgg9i vtF5YPzzdRlzWEEdmOnMcp5cbUfJR8APJrK2aksIjYJjC2CDx4SihD0JexhQIFgZKMMrN0K4aAj P0fmIn0oAC9xHl+j6dZveDG4Pg= X-Received: by 2002:a05:600c:46d2:b0:488:b187:3c with SMTP id 5b1f17b1804b1-48e51f32c65mr172809535e9.14.1778224364904; Fri, 08 May 2026 00:12:44 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.43 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:43 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 45/52] sudo: set CVE_PRODUCT Date: Fri, 8 May 2026 09:11:38 +0200 Message-ID: <51c260422d05c8c6a2fc799afc4e80614cef7aec.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:51 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236687 From: Peter Marko This change removes currently open CVE-2025-64170 and CVE-2025-64517 from reports which are for "trifectatech:sudo-rs". It also removes following "patched" ones: * CVE-2023-42456 (memorysafety:sudo) * CVE-2025-46717 (trifectatech:sudo) * CVE-2025-46718 (trifectatech:sudo) All these are also for "sudo-rs". Signed-off-by: Peter Marko Signed-off-by: Richard Purdie (cherry picked from commit 0459398d31f74e9653cb55a57d8d0f6bfbdfa2ad) Signed-off-by: Yoann Congal --- meta/recipes-extended/sudo/sudo_1.9.17p2.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-extended/sudo/sudo_1.9.17p2.bb b/meta/recipes-extended/sudo/sudo_1.9.17p2.bb index d6ee881f8ce..6be2a7c678a 100644 --- a/meta/recipes-extended/sudo/sudo_1.9.17p2.bb +++ b/meta/recipes-extended/sudo/sudo_1.9.17p2.bb @@ -10,6 +10,8 @@ PAM_SRC_URI = "file://sudo.pam" SRC_URI[sha256sum] = "4a38a1ab3adb1199257edc2a7c4a2bd714665eb605b04368843b06dada2cfcfb" +CVE_PRODUCT = "gratisoft:sudo sudo:sudo sudo_project:sudo todd_miller:sudo" + DEPENDS += " virtual/crypt ${@bb.utils.contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}" RDEPENDS:${PN} += " ${@bb.utils.contains('DISTRO_FEATURES', 'pam', 'pam-plugin-limits pam-plugin-keyinit', '', d)}" From patchwork Fri May 8 07:11:39 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87721 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id DCDC0CD37B0 for ; Fri, 8 May 2026 07:12:50 +0000 (UTC) Received: from mail-wr1-f48.google.com (mail-wr1-f48.google.com [209.85.221.48]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.8180.1778224367475417762 for ; Fri, 08 May 2026 00:12:47 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=G7Yz+zfs; spf=pass (domain: smile.fr, ip: 209.85.221.48, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f48.google.com with SMTP id ffacd0b85a97d-44a044cb827so1304660f8f.0 for ; Fri, 08 May 2026 00:12:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224366; x=1778829166; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=oQUgV+M18RP3uOHUZOPyuF2v498jzbbqQI5XTZqO/FM=; b=G7Yz+zfsq6OlXDgPaO6fmDr8RIKMuQmWHlGcTzmpB6/Z7HcaasJEeyHIZo2UEeCZ3q ZD0Jw50TeX0LE4hbELAZmUArVi7HT6lCZ3QXxXiCbAUult33el3pwJT7oEFPWVUHTTXr iNlwHtMR4kz3bhVffT90VJgMwPxpqk0cT4AM8= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224366; x=1778829166; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=oQUgV+M18RP3uOHUZOPyuF2v498jzbbqQI5XTZqO/FM=; b=BJXLr+wGKu2wvuLJvE8me+iA0hIg5BbDNWnPRJXC8VQdBVqnZyWtz7ln4qe8+kznRy fJwtNaSEjKi72e/K3Ba7cnrOJ37a2x+gJb3hby56+KFJACJm9gnSBnnn906fhN3ZIWIU k3Jso2Nk4bPgC/jkoBOLkXdm1fXkJNGE5b4fhXB2hFIEA9ZP+mDfehQOCVVB0E0FkH1X VL8hQxEBewiGOn7ju9uZa5P/eG8S2ZXQSlTKYwIwoxcM69GDLVy+UJdRpBaEuTspUcWI 14fbUFKGuZa8LM67bTSY2LWyaVz/9fM0s8rZo3yLoOXbVmizHKE/dxr+2Kt2kEDIPaP7 kyDQ== X-Gm-Message-State: AOJu0Yxk/pToYFF3uaDeSQHpd4sxF4IibuScMtfZwRBnOicIjqwUx/eb A5aT8Qwuvehp5+6xmqt12fJv4h7gNs0RwEvUh7ZDzArbh6LsFxg40Ooep3w4YFJyfgXfV/tmG+L 8ftTNVX8= X-Gm-Gg: Acq92OGwfWAAJr5ABx1XSIMQfjVRvVKriYeH+LZZh70JVUUD5BqX0mzV8DoCd27vT5g J2lRiGTNqpFighU4T2uWYwCZQzp0hIuWR+sysiOWQr22lD67a5IEOTBETAn1x6LDgG2/wdB8FbB XMNdBofKYSzMq/jHpbaneIrwZr+PrJjW18Bz07WbmC3N32uY9d2DGUYFRksvjQrTyuRFd9hQLQB AWksVO+o6vX6RIOfJgxY95/BBP6PZYvhtQg30yn/LLmqYe/F6z+dWBZdLy+ZHUdin3q4J2Dg+uw H+ZHqQiwuvLoMnSQMtGAro4v2S2s+6RBUuSF+H3UBFYv1ryivmUuzHJmSgfgZvD50chfdJKX3yv CvWrQkOTKNe+CbnkUVKDIZ2jrdQ6NY/mNp9ZS/G1V/2PHJPdNezY45ynUJdQIFe0RvbqQ20t3Pe 9WhPSt7bEbYkp8m19VK7zm5476wxmxq1NCKQDjlyogulPCfscZGRnnl090M6qC1He3xSisEy/en swRd2GNyYQ3nv8bL0PmpZ2YTI8= X-Received: by 2002:a05:6000:2383:b0:43d:7dcf:ae26 with SMTP id ffacd0b85a97d-4515d4d107bmr19067835f8f.34.1778224365557; Fri, 08 May 2026 00:12:45 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.45 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:45 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 46/52] apr: Add CVE_PRODUCT to support product name Date: Fri, 8 May 2026 09:11:39 +0200 Message-ID: <81e41469b7f2b455a54e10a534e679e4a466edeb.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:50 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236688 From: Himanshu Jadon apr is tracked in NVD under apache:portable_runtime rather than the recipe name apr. Set CVE_PRODUCT accordingly so cve-check uses the correct NVD product identity for APR. No additional alias was found to be necessary for this recipe. Signed-off-by: Himanshu Jadon Signed-off-by: Mathieu Dubois-Briand (cherry picked from commit bc3803e12d4938e2de514c39bd5d0f011f883ace) Signed-off-by: Yoann Congal --- meta/recipes-support/apr/apr_1.7.6.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta/recipes-support/apr/apr_1.7.6.bb b/meta/recipes-support/apr/apr_1.7.6.bb index 8ad3756b3a0..43d5b0bf4dd 100644 --- a/meta/recipes-support/apr/apr_1.7.6.bb +++ b/meta/recipes-support/apr/apr_1.7.6.bb @@ -138,3 +138,6 @@ do_install_ptest() { } export CONFIG_SHELL = "/bin/bash" + +# Add CVE_PRODUCT to match the NVD CPE product name +CVE_PRODUCT = "apache:portable_runtime" From patchwork Fri May 8 07:11:40 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87720 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id D1069CD37AC for ; Fri, 8 May 2026 07:12:50 +0000 (UTC) Received: from mail-wr1-f49.google.com (mail-wr1-f49.google.com [209.85.221.49]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.8181.1778224368249346683 for ; Fri, 08 May 2026 00:12:48 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=qhxv6MHM; spf=pass (domain: smile.fr, ip: 209.85.221.49, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f49.google.com with SMTP id ffacd0b85a97d-45297094718so1336339f8f.3 for ; Fri, 08 May 2026 00:12:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224366; x=1778829166; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=DbLMxbqJvbTldMzQ3NnHLQf60DA369NifxApNJQLXOA=; b=qhxv6MHMTSbHNJPhg4Zp8INeLHhf7KEwSH6U1OmawEeleJ2Mqr/GlGeTRTu+rdQb0S EA77XBrMbOSe22FCPGtb/ToQDVKA1yyK1J5+8mGclMyU6WrxAj0OOsnN1nPKj8mxWDv+ N1v3b1vUKrTFd2WweWFtYFjKZVS6AzSXnOlBE= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224366; x=1778829166; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=DbLMxbqJvbTldMzQ3NnHLQf60DA369NifxApNJQLXOA=; b=PelZYmcHxkpusywqRu4Oshpx+j8QnQQUu6eKO2WQIW96PYWkJ4n1kyzxOJmTh7KgRN fpGRFuRlREClpQcMal/BDjxA7n3d+BuwYCPuh6a+GIUiG4LssxgqbJKQ9Z5/cbw53gBG vmL61yF3eVA1AVSX5zqA3Yl1wFkntyLpNxMgmj/XKWV1Ia0eGlKnVFjd2OiXcMcB477I N6pi2E38avt49ppv5L8/d48i2i438A+q2dEuw78sXSFaHAwhUEavG7+RrjnAnRFXa/fW p23V7lPvMNqNxf2Tlj0wgWsPq7Py5Cowq8tcC1UfRsR5s4tPDrZRqxxw7Q5Psunl/6zw n6Zg== X-Gm-Message-State: AOJu0YxgJeRBTvqaZzp93ybekHuNEv4c+iHnjDj7T5uDIVGIMzNcl6A9 FzgjA0K3y3CHjz2jxFi/iS2ku1+9eJs3cH53aHhgOZd9E7k39S28AW8YnItPWX0jeqbwYy6NQ0S 4XBQdHuQ= X-Gm-Gg: Acq92OFXefm6hn9q6/6UKSFsd6Qvx1doAo+svFvGMgi7nRNr/kOvsUnpqHvSMIztPFk 01g6tMZYUTwTve4S5kuFVCgWnSZpoYzLuwqHoAV/gX4y9iVzXSeMmC+IPvPNdi0TRz8qLn+FSFL x6LEERF5RNs0YWHSLdM9tzpMZ0V+GfDi+crsqJQkiwZwm1aTImyZDGHf4vqV9QsyUaGKT9Z3cKE iEW5nHrMdbkN+3ztw+JAW2tbvXfJJQC+A+fRo7mr8UYLC67ktf5LduSc5k8jIg2vA+9iMLVuZNF lVau0m+S2TcKcUEGEaGUuH/FFDN59sFfgg1e1lvUHWczGBvW/rGzCwuVhJUVYnPdPNS7cMpDp5o fSyw/4fUSSuQfnZ9dy2xcfNkjHte86hhWEMqMdF6uN1wea/ukKu+3+D5WEGmF/k7CiCZxKB01ZI sImkov6if4+tNDA9PN5jb4Hz4sPas7n/y7mB1TiywFzouzyKKxEgq4gDRWK4WQiZp1ZpXXKRfs6 zy2m9S6pSIpVY8V6cl900B60IM= X-Received: by 2002:a05:6000:1acf:b0:446:189c:ac4e with SMTP id ffacd0b85a97d-4515d5c63f0mr17368689f8f.34.1778224366175; Fri, 08 May 2026 00:12:46 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.45 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:45 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 47/52] apr-util: Add CVE_PRODUCT to support product name Date: Fri, 8 May 2026 09:11:40 +0200 Message-ID: <057caf59552ae32301a0c8868abf7b0f10f481db.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:50 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236689 From: Himanshu Jadon apr-util is tracked in NVD under apache:apr-util, while a smaller set of newer CVEs also appears under apache:portable_runtime_utility. Set CVE_PRODUCT accordingly so cve-check can cover both the historical and current NVD product identities used for APR-util. Signed-off-by: Himanshu Jadon Signed-off-by: Mathieu Dubois-Briand (cherry picked from commit 927b505c982ed7443aed348ca54b0073ac63d938) Signed-off-by: Yoann Congal --- meta/recipes-support/apr/apr-util_1.6.3.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta/recipes-support/apr/apr-util_1.6.3.bb b/meta/recipes-support/apr/apr-util_1.6.3.bb index 17dc79cc9a4..cb5465f8729 100644 --- a/meta/recipes-support/apr/apr-util_1.6.3.bb +++ b/meta/recipes-support/apr/apr-util_1.6.3.bb @@ -94,3 +94,6 @@ do_install_ptest() { cp -r ${B}/test/$i $t; \ done } + +# Add CVE_PRODUCT to match the NVD CPE product name +CVE_PRODUCT = "apache:apr-util apache:portable_runtime_utility" From patchwork Fri May 8 07:11:41 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87718 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id B75BDCD37AA for ; Fri, 8 May 2026 07:12:50 +0000 (UTC) Received: from mail-wm1-f53.google.com (mail-wm1-f53.google.com [209.85.128.53]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.8249.1778224369024717087 for ; Fri, 08 May 2026 00:12:49 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=LGylHYIx; spf=pass (domain: smile.fr, ip: 209.85.128.53, mailfrom: yoann.congal@smile.fr) Received: by mail-wm1-f53.google.com with SMTP id 5b1f17b1804b1-48d102471a4so16436475e9.2 for ; Fri, 08 May 2026 00:12:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224367; x=1778829167; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=MHD2EeNVpltxNyjV1miDC5Uysy9+dSp+le1og/y3FSI=; b=LGylHYIxTqc6BCZb3tet0TzpBE2wgE+IuAsliubqaTh5cP+xMUCAFESclWIQBMF3EP acSPImZthHY82oYEh/hRqIJBQGUnOdAJ0Os7wbhleszaNXyzE971YEWsGr41m2CYES3m pcB+IeAMjsa7ueAbU+jzxpFwuodF7zDpkyg0Y= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224367; x=1778829167; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=MHD2EeNVpltxNyjV1miDC5Uysy9+dSp+le1og/y3FSI=; b=aLZtrJcRf2ufIL4W6Q8NORVFRYRVg+rL21Kmht+ddOk8jpL2IWzEggu6jPMz7wzIP5 RAJXjn5hntjprPTqe/AmxX+mTde6M/jYKWlJ3jlsgZ4OpJGXo8whiHNYzPb679n/JxHC W0bB5ItLvgcQOX5nhBao/nrhN0aiGzJDqnZ5iUZDBpCYIArrzzSqMFWlo8hdhPUV8zwS FumEcV5RKyCmd9Otabpq/KBfraRlkoNP/RS7DuZ4yXg6vticHXmzUpZ3nUwFf1J5hMUD lJ40D5U807UWEYqb/i+lfZY0WTbeDZQGxPDHf37NSIUwHPmOLlftwhAwDms8baApz/+A FMSw== X-Gm-Message-State: AOJu0YzTlnV29ER1Tjbv2qmjp7PPozrno46EHEwzgl7xxuzN+5abwENW HxO6g5JEMQ3b2XC+y+uPAs/eQuQoA5BetehmQHjgtAdt5S+wP2CoKmLDTycFV57eTFQCEKEBFfL oYrR8D6c= X-Gm-Gg: AeBDieuW6rBpFFzCkLg0whESO5g+qfR6GmlRk6rmsQStXafvHobEzk5t24ofOy4I4CV EWpgUsxnRwKhf6r49D891XYCgPW41qmYddDZQSLtsYJhN6I/opkx5SFu2L1CtnyhslZjx8RkeMq zoS4mhLJzTYaPQduL+IykucKdXs5rmU0QQopfEp2Wks3keVupcsMhTvctig96vfklCcyY+Amr+5 zSrZP3zoisF58WV+0ZU0qzyQZVotcdJ+PJj7B4ZsKg/oUGpvQut8lVmKUE2VLI08+jaGD/rxAge yoqrQ10ntEr8CySa6ih/HmTOOVrXighnpUcv1GAj3+7xW/N/j+i5m/mHldke5u56fGptRtvKlWj ojVaktkcdeBKZU3JxEhrEzPFxgWSun+FZyVYbTgS0sFR+XnSmNGitu/WfeFeJNq1HZPd8dK6ca7 PdnjHgsv4iSvgcdP/EfmyunS3ujOuFzEeUtRV0ZoLSdKUNX+T44YwPjzleut8o18pIRKL7JDQW+ sPW7XakYmVIIr/oik7HsaSNqX0= X-Received: by 2002:a05:600c:4703:b0:486:fb0b:ad79 with SMTP id 5b1f17b1804b1-48e676ac029mr20567455e9.20.1778224366909; Fri, 08 May 2026 00:12:46 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.46 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:46 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 48/52] libarchive: set status for CVE-2026-4426 Date: Fri, 8 May 2026 09:11:41 +0200 Message-ID: <6e77ce9e6e46e90348bdd455a1d419215fa4f997.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:50 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236690 From: Peter Marko This is a version-less RedHat CVE so needs explicit status. Fix reference: PR/commit listed in [1] backported as [2]. [1] https://security-tracker.debian.org/tracker/CVE-2026-4426 [2] https://github.com/libarchive/libarchive/commit/ec1bc43156b84e12ff363f39005533e6f7067297 Signed-off-by: Peter Marko Signed-off-by: Richard Purdie (cherry picked from commit ab127fa9d3ec67951374724071a71dbb9121b922) Signed-off-by: Yoann Congal --- meta/recipes-extended/libarchive/libarchive_3.8.7.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-extended/libarchive/libarchive_3.8.7.bb b/meta/recipes-extended/libarchive/libarchive_3.8.7.bb index a65afb7b22d..577362ef8b0 100644 --- a/meta/recipes-extended/libarchive/libarchive_3.8.7.bb +++ b/meta/recipes-extended/libarchive/libarchive_3.8.7.bb @@ -89,4 +89,5 @@ do_install_ptest() { RDEPENDS:${PN}-ptest += "bsdtar bsdcpio" +CVE_STATUS[CVE-2026-4426] = "fixed-version: fixed since 3.8.7" CVE_STATUS[CVE-2026-5121] = "fixed-version: fixed since 3.8.7" From patchwork Fri May 8 07:11:42 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87719 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id A9DEFCD3436 for ; Fri, 8 May 2026 07:12:50 +0000 (UTC) Received: from mail-wm1-f46.google.com (mail-wm1-f46.google.com [209.85.128.46]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.8182.1778224369781557373 for ; Fri, 08 May 2026 00:12:50 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=K8FCHAlV; spf=pass (domain: smile.fr, ip: 209.85.128.46, mailfrom: yoann.congal@smile.fr) Received: by mail-wm1-f46.google.com with SMTP id 5b1f17b1804b1-48374014a77so18594955e9.3 for ; Fri, 08 May 2026 00:12:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224368; x=1778829168; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=2Idupehwjothl+m+cXeHk5tDonC/heb6x92p1B+xXG4=; b=K8FCHAlVquQMHROOe6dlSMbb7MvEQsz0culhlEKG52JAo950doQ9px54daul48dEJ4 mzURr8AZYzpz+CfX/2Rt/vE1cx7gtgLuvNSNVTH0WOE25PHmvKALEfkb8AJiOilImHNi m04+dw1Fzlr0eXAWB6obtSwu/hlbo7h7U5Zn8= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224368; x=1778829168; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=2Idupehwjothl+m+cXeHk5tDonC/heb6x92p1B+xXG4=; b=oEAaL9/VI+NnydxHkSFPL82OE1UY6qZ12jhe3nIN2beEdqMPmbkIZ3rqr1OpJcA7Pm M9mNg5+/TlWBYSKljo1TGFEBg/cjzLjsf2/OA5J7KCiNKN+tMTkOyO5jEdqJK7VoDUWO S5ILA06ziDYuNy42YxU4pGglou9Mh/h1f60DcWE5B0WgpQ42qLraML+6p23bBLvf4jcs xrBkeP7OCAZmh+3kIBcgW1QoXmdHLqzATdxRKjL+mAN9DYX6x9ly90fQBjmYw1X7sT+n QUIkqgPrX4f13nEAm01WmFjRcMESQSsZGASY/q+ODC6AHCASmDMCcTZdtFB/4X9Kt8sJ xNcg== X-Gm-Message-State: AOJu0YxphPJBRAeewr63t/1qE73PFeDKDRabIg5DNOMCCkE39Nbe72gZ gaAF7kkRK05fDYz3uOxIyaRrrfg0gNPZUo21kbIuB3HtzaVk4Ke/Wt8lQUfn+/lO9PVIlch40qG hqxBdf24= X-Gm-Gg: AeBDiev5F+ZKVxXwR3WnEgZPwckNa7YcFp7A8++dmyiEtCFVO3dvdyvj4VQRkmMLEWD /GURSUwuxE/GtZwrnysTDLGziwzD12iP0eAXr4Z5JaeofalkmFDRv+f14HMxv9v5cVOF1v9UUaX REFKwNqtHU/dpQyD0mFqHaNKPFdha9dIp3bciaCXKDG7Uar4aDu9WbK8nA1HqTwDjo80gMJUot7 KYNPszRLClIbWueDuw0HAcMTq2mIfYQu3CTHEPDS3ArLHM1w/cp5novZocHR//jkHgzsHYHD7ml 91/hMRx1h7XP6S1b3mMs0g2BbwzNYcTTfu7cBJ4G/q/Gb+8VbF8HohtmiBTKNLx+Y7WVH32SoX+ ArnsvkFnv3Me6kzPyebxlAloORjL1qoIMgS+jtASumf60PyD/ptC/sNJkf2BDS3X8hbwHS0eryk giNAqCFWmNgveAVlg3cs2kZ3hlFAZ9+U5bKxkxojp2EVAqDYbImg5g45c3eh302GDTQi1XK+e0I m5ZU1QzRs5cK42Nf1Tt/GDCcLzQBfEGwO1jlw== X-Received: by 2002:a05:600d:6:b0:48a:52ee:5776 with SMTP id 5b1f17b1804b1-48e51f28ef2mr134901765e9.11.1778224367658; Fri, 08 May 2026 00:12:47 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.47 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:47 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 49/52] sudo: patch CVE-2026-35535 Date: Fri, 8 May 2026 09:11:42 +0200 Message-ID: <6d6ce512f1e98ef294b59b798e60659c13fd0d3c.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:50 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236691 From: Peter Marko Pick patch mentioned in both NVD and Debian report. Signed-off-by: Peter Marko Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie (cherry picked from commit 4cef4ef8d002bb035b19a8f8b36057d8d4cf8f0d) Signed-off-by: Yoann Congal --- .../sudo/files/CVE-2026-35535.patch | 147 ++++++++++++++++++ meta/recipes-extended/sudo/sudo_1.9.17p2.bb | 1 + 2 files changed, 148 insertions(+) create mode 100644 meta/recipes-extended/sudo/files/CVE-2026-35535.patch diff --git a/meta/recipes-extended/sudo/files/CVE-2026-35535.patch b/meta/recipes-extended/sudo/files/CVE-2026-35535.patch new file mode 100644 index 00000000000..c90e4b3b0d3 --- /dev/null +++ b/meta/recipes-extended/sudo/files/CVE-2026-35535.patch @@ -0,0 +1,147 @@ +From 3e474c2f201484be83d994ae10a4e20e8c81bb69 Mon Sep 17 00:00:00 2001 +From: "Todd C. Miller" +Date: Sat, 8 Nov 2025 15:34:02 -0700 +Subject: [PATCH] exec_mailer: Set group as well as uid when running the mailer + +Also make a setuid(), setgid() or setgroups() failure fatal. + +Found by the ZeroPath AI Security Engineer + +CVE: CVE-2026-35535 +Upstream-Status: Backport [https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69] +Signed-off-by: Peter Marko +--- + include/sudo_eventlog.h | 3 ++- + lib/eventlog/eventlog.c | 21 +++++++++++++++++---- + lib/eventlog/eventlog_conf.c | 4 +++- + plugins/sudoers/logging.c | 2 +- + plugins/sudoers/policy.c | 2 +- + 5 files changed, 24 insertions(+), 8 deletions(-) + +diff --git a/include/sudo_eventlog.h b/include/sudo_eventlog.h +index eb9f4f4a8..485d2593e 100644 +--- a/include/sudo_eventlog.h ++++ b/include/sudo_eventlog.h +@@ -80,6 +80,7 @@ struct eventlog_config { + int syslog_rejectpri; + int syslog_alertpri; + uid_t mailuid; ++ gid_t mailgid; + bool omit_hostname; + const char *logpath; + const char *time_fmt; +@@ -151,7 +152,7 @@ void eventlog_set_syslog_rejectpri(int pri); + void eventlog_set_syslog_alertpri(int pri); + void eventlog_set_syslog_maxlen(size_t len); + void eventlog_set_file_maxlen(size_t len); +-void eventlog_set_mailuid(uid_t uid); ++void eventlog_set_mailuser(uid_t uid, gid_t gid); + void eventlog_set_omit_hostname(bool omit_hostname); + void eventlog_set_logpath(const char *path); + void eventlog_set_time_fmt(const char *fmt); +diff --git a/lib/eventlog/eventlog.c b/lib/eventlog/eventlog.c +index f4a9f330d..2db2f251c 100644 +--- a/lib/eventlog/eventlog.c ++++ b/lib/eventlog/eventlog.c +@@ -304,15 +304,13 @@ exec_mailer(int pipein) + syslog(LOG_ERR, _("unable to dup stdin: %m")); // -V618 + sudo_debug_printf(SUDO_DEBUG_ERROR, + "unable to dup stdin: %s", strerror(errno)); +- sudo_debug_exit(__func__, __FILE__, __LINE__, sudo_debug_subsys); +- _exit(127); ++ goto bad; + } + + /* Build up an argv based on the mailer path and flags */ + if ((mflags = strdup(evl_conf->mailerflags)) == NULL) { + syslog(LOG_ERR, _("unable to allocate memory")); // -V618 +- sudo_debug_exit(__func__, __FILE__, __LINE__, sudo_debug_subsys); +- _exit(127); ++ goto bad; + } + argv[0] = sudo_basename(mpath); + +@@ -331,11 +329,23 @@ exec_mailer(int pipein) + if (setuid(ROOT_UID) != 0) { + sudo_debug_printf(SUDO_DEBUG_ERROR, "unable to change uid to %u", + ROOT_UID); ++ goto bad; ++ } ++ if (setgid(evl_conf->mailgid) != 0) { ++ sudo_debug_printf(SUDO_DEBUG_ERROR, "unable to change gid to %u", ++ (unsigned int)evl_conf->mailgid); ++ goto bad; ++ } ++ if (setgroups(1, &evl_conf->mailgid) != 0) { ++ sudo_debug_printf(SUDO_DEBUG_ERROR, "unable to set groups to %u", ++ (unsigned int)evl_conf->mailgid); ++ goto bad; + } + if (evl_conf->mailuid != ROOT_UID) { + if (setuid(evl_conf->mailuid) != 0) { + sudo_debug_printf(SUDO_DEBUG_ERROR, "unable to change uid to %u", + (unsigned int)evl_conf->mailuid); ++ goto bad; + } + } + sudo_debug_exit(__func__, __FILE__, __LINE__, sudo_debug_subsys); +@@ -347,6 +357,9 @@ exec_mailer(int pipein) + sudo_debug_printf(SUDO_DEBUG_ERROR, "unable to execute %s: %s", + mpath, strerror(errno)); + _exit(127); ++bad: ++ sudo_debug_exit(__func__, __FILE__, __LINE__, sudo_debug_subsys); ++ _exit(127); + } + + /* Send a message to the mailto user */ +diff --git a/lib/eventlog/eventlog_conf.c b/lib/eventlog/eventlog_conf.c +index bbc3daaac..3d37b632c 100644 +--- a/lib/eventlog/eventlog_conf.c ++++ b/lib/eventlog/eventlog_conf.c +@@ -70,6 +70,7 @@ static struct eventlog_config evl_conf = { + MAXSYSLOGLEN, /* syslog_maxlen */ + 0, /* file_maxlen */ + ROOT_UID, /* mailuid */ ++ ROOT_GID, /* mailgid */ + false, /* omit_hostname */ + _PATH_SUDO_LOGFILE, /* logpath */ + "%h %e %T", /* time_fmt */ +@@ -151,9 +152,10 @@ eventlog_set_file_maxlen(size_t len) + } + + void +-eventlog_set_mailuid(uid_t uid) ++eventlog_set_mailuser(uid_t uid, gid_t gid) + { + evl_conf.mailuid = uid; ++ evl_conf.mailgid = gid; + } + + void +diff --git a/plugins/sudoers/logging.c b/plugins/sudoers/logging.c +index ec092d14e..1626a28cb 100644 +--- a/plugins/sudoers/logging.c ++++ b/plugins/sudoers/logging.c +@@ -1157,7 +1157,7 @@ init_eventlog_config(void) + eventlog_set_syslog_alertpri(def_syslog_badpri); + eventlog_set_syslog_maxlen(def_syslog_maxlen); + eventlog_set_file_maxlen(def_loglinelen); +- eventlog_set_mailuid(ROOT_UID); ++ eventlog_set_mailuser(ROOT_UID, ROOT_GID); + eventlog_set_omit_hostname(!def_log_host); + eventlog_set_logpath(def_logfile); + eventlog_set_time_fmt(def_log_year ? "%h %e %T %Y" : "%h %e %T"); +diff --git a/plugins/sudoers/policy.c b/plugins/sudoers/policy.c +index af3210dda..706c492b7 100644 +--- a/plugins/sudoers/policy.c ++++ b/plugins/sudoers/policy.c +@@ -639,7 +639,7 @@ sudoers_policy_deserialize_info(struct sudoers_context *ctx, void *v, + } + + #ifdef NO_ROOT_MAILER +- eventlog_set_mailuid(ctx->user.uid); ++ eventlog_set_mailuser(ctx->user.uid, ctx->user.gid); + #endif + + /* Dump settings and user info (XXX - plugin args) */ diff --git a/meta/recipes-extended/sudo/sudo_1.9.17p2.bb b/meta/recipes-extended/sudo/sudo_1.9.17p2.bb index 6be2a7c678a..7dfa0cef6c2 100644 --- a/meta/recipes-extended/sudo/sudo_1.9.17p2.bb +++ b/meta/recipes-extended/sudo/sudo_1.9.17p2.bb @@ -4,6 +4,7 @@ SRC_URI = "https://www.sudo.ws/dist/sudo-${PV}.tar.gz \ ${@bb.utils.contains('DISTRO_FEATURES', 'pam', '${PAM_SRC_URI}', '', d)} \ file://0001-sudo.conf.in-fix-conflict-with-multilib.patch \ file://0001-m4-Backport-ax_prog_cc_for_build.m4-macros.patch \ + file://CVE-2026-35535.patch \ " PAM_SRC_URI = "file://sudo.pam" From patchwork Fri May 8 07:11:43 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87729 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 8B820CD37B8 for ; Fri, 8 May 2026 07:12:51 +0000 (UTC) Received: from mail-wr1-f42.google.com (mail-wr1-f42.google.com [209.85.221.42]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.8183.1778224370537068708 for ; Fri, 08 May 2026 00:12:50 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=PVr78aIN; spf=pass (domain: smile.fr, ip: 209.85.221.42, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f42.google.com with SMTP id ffacd0b85a97d-43d7645adbdso956080f8f.1 for ; Fri, 08 May 2026 00:12:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224369; x=1778829169; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=MqZxnDaW5IeXGMTvqn1RW6VD9WyvshLzH0fLt6f/ffY=; b=PVr78aINcae0bE2+4F8YkgDqQJkn5c4EnGo6CPbMP+H4DUaag+qR2rg5sjvatPtSST KnYOlyuTwgwqzgK8oQnIiMBtZSYCeEpacpOthhWnqdyVlZ9Eyx2Hsc9nhEOwKmQc4lcW wDCzPoHnxNPOp7rxF/WNDiYmYuT5QdeGPP0ZA= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224369; x=1778829169; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=MqZxnDaW5IeXGMTvqn1RW6VD9WyvshLzH0fLt6f/ffY=; b=jnETOw7tk9EbEwaao+YRUAhoNH2T+FHG+9AzA8DcaY9Nd51jkeYRuGfXIFh0xvPgXr MpCNvT75tVMdfTg0Ij+iCdbbi/4XC4Q7M6lJgHFzRcQfgpVBbKyXoVs0p6rkTM2uMREW 5zyw0sy7HlknyG44I5B1Uil6Rcf04VWHpiGOcoEoKLO+0mOtEBGLPZBu9/h3p3DNBpC3 JLrI6rFWFmcIn11Ro1yvOebFcShtQzyaLFB31+PuPqufCTdR4ygTJK11Ur+c8cxT0ONV E69iZRr5HqLlu7HlvcvENIwBQYplpNRmmlEpAoda9L8nWpDmOoOJ4jlkVRe2UgthgGfz 6apw== X-Gm-Message-State: AOJu0YyfQ5qKrEkZ0s43O1tv7Si3PRfzZOYrIy2TmQZInmGuIJqv0QMf d45AGxABr1JkqxJmBj8UQmjYPgR3Z+azj2eUBDSVmgtW6yr+hips9doDHoAxqY134tuPF3QX2Qn gVGSOoGs= X-Gm-Gg: Acq92OHYknEhw9TLiV35mX5MaCDiei+zjlnMIT37OJUoTGk23wa9QkKpANU7SKnOcpQ VE8t1ocaBBVkp1HdHAmk6dUn+aZ+zDPliJj2GR5tRrbi1kwupq+KFIQMF4Xxc0xWYLBz5oNiTvH ugP2J4Eid+p+KZkqHkGBh93p9WECuQiZM1O60ol4PUUwNPlYKP8hvmNSSSFM38wuvFdYOu3A0Ja wceCJ8yFhCH2UInqBL6AH0uC+DIU/tTSOgqV2BMUNDqCa/KlxiZBrIwU5YyFPMEDYSB+XMfIBwi NR+jhXPTYukru8DaBhrGBAw3xscqf4PTU4MBlO3jPSXHeVDyYm3JlfFhV5YgRMqnMx0ecRs4yzS U2KVh7qxjJFc99uoTVRhnwmmw58xj2Ws7viNAc7e1uNksYX7lpmHayz8Y4k4yosMFsn2ru+D1vX NF8/GETYSt00/a+QT+laHCqWix44pwpgeKMyJ8TEwhMPKU6VL7Hf78n4a33HnF7ASI9JHzvnYeG K2ZiaUulEWqg1A6NJB7jGN4xDP39GIq4h6WLQ== X-Received: by 2002:a5d:5d87:0:b0:449:9aee:4581 with SMTP id ffacd0b85a97d-4515b61bd32mr18078282f8f.12.1778224368426; Fri, 08 May 2026 00:12:48 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.47 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:47 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 50/52] inetutils: patch CVE-2026-32772 Date: Fri, 8 May 2026 09:11:43 +0200 Message-ID: <0638911b940a5b6f9338fe4627ca3d166cf9cf03.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:12:51 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236692 From: Peter Marko Pick patch which references vulnerability report [1] linked in NVD report (see NEWS file). [1] https://www.openwall.com/lists/oss-security/2026/03/13/1 Signed-off-by: Peter Marko Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie (cherry picked from commit 36bdd32ebd952ac1c5c79130e328168b4d1e8a71) Signed-off-by: Yoann Congal --- .../inetutils/inetutils/CVE-2026-32772.patch | 138 ++++++++++++++++++ .../inetutils/inetutils_2.7.bb | 1 + 2 files changed, 139 insertions(+) create mode 100644 meta/recipes-connectivity/inetutils/inetutils/CVE-2026-32772.patch diff --git a/meta/recipes-connectivity/inetutils/inetutils/CVE-2026-32772.patch b/meta/recipes-connectivity/inetutils/inetutils/CVE-2026-32772.patch new file mode 100644 index 00000000000..232774195f5 --- /dev/null +++ b/meta/recipes-connectivity/inetutils/inetutils/CVE-2026-32772.patch @@ -0,0 +1,138 @@ +From d6b8b83aa51616946fd314bc48087312d13c99f8 Mon Sep 17 00:00:00 2001 +From: Collin Funk +Date: Thu, 26 Mar 2026 22:52:54 -0700 +Subject: [PATCH] telnet: don't leak the value of unexported environment + variables + +Patch based on the following OpenBSD commit: + + +* NEWS.md: Mention the fix. +* telnet/commands.c (env_getvalue): Add a boolean argument to prevent +prevent unexported variables from being returned. +* telnet/externs.h (env_getvalue): Adjust the function declaration. +* telnet/authenc.c (telnet_getenv): Add the new argument. +* telnet/telnet.c (dooption, gettermname, suboption, env_opt_add) +(telnet): Likewise. + +CVE: CVE-2026-32772 +Upstream-Status: Backport [https://cgit.git.savannah.gnu.org/cgit/inetutils.git/commit/?id=d6b8b83aa51616946fd314bc48087312d13c99f8] +Signed-off-by: Peter Marko +--- + NEWS | 5 +++++ + telnet/authenc.c | 2 +- + telnet/commands.c | 6 ++---- + telnet/externs.h | 3 ++- + telnet/telnet.c | 10 +++++----- + 5 files changed, 15 insertions(+), 11 deletions(-) + +diff --git a/NEWS b/NEWS +index 08370442..6e259e02 100644 +--- a/NEWS ++++ b/NEWS +@@ -1,5 +1,10 @@ + GNU inetutils NEWS -- history of user-visible changes. + ++** telnet no longer leaks the value of unexported environment variables ++to servers sending the NEW-ENVIRON SEND USERVAR command. ++Reported by Justin Swartz in ++. ++ + ** telnetd no longer allows clients to write past the end of a stack + allocated buffer, possibly leading to remote code execution, using an + SLC suboption with many triplets using function octets greater than 18. +diff --git a/telnet/authenc.c b/telnet/authenc.c +index 2706c9f8..f8daea9d 100644 +--- a/telnet/authenc.c ++++ b/telnet/authenc.c +@@ -93,7 +93,7 @@ telnet_spin (void) + char * + telnet_getenv (char *val) + { +- return ((char *) env_getvalue (val)); ++ return (char *) env_getvalue (val, false); + } + + char * +diff --git a/telnet/commands.c b/telnet/commands.c +index 4967559b..9d85df73 100644 +--- a/telnet/commands.c ++++ b/telnet/commands.c +@@ -2050,12 +2050,10 @@ env_default (int init, int welldefined) + } + + unsigned char * +-env_getvalue (const char *var) ++env_getvalue (const char *var, bool exported_only) + { + struct env_lst *ep = env_find (var); +- if (ep) +- return (ep->value); +- return (NULL); ++ return ep && (! exported_only || ep->export) ? ep->value : NULL; + } + + #if defined OLD_ENVIRON && defined ENV_HACK +diff --git a/telnet/externs.h b/telnet/externs.h +index c1f5850e..0adc295a 100644 +--- a/telnet/externs.h ++++ b/telnet/externs.h +@@ -331,7 +331,8 @@ env_opt (unsigned char *, int), + env_opt_start (void), + env_opt_start_info (void), env_opt_add (unsigned char *), env_opt_end (int); + +-extern unsigned char *env_default (int, int), *env_getvalue (const char *); ++extern unsigned char *env_default (int, int); ++extern unsigned char *env_getvalue (const char *, bool); + + int dosynch (const char *); + int get_status (const char *); +diff --git a/telnet/telnet.c b/telnet/telnet.c +index 6b0befc3..f83dfc18 100644 +--- a/telnet/telnet.c ++++ b/telnet/telnet.c +@@ -496,7 +496,7 @@ dooption (int option) + #endif + + case TELOPT_XDISPLOC: /* X Display location */ +- if (env_getvalue ("DISPLAY")) ++ if (env_getvalue ("DISPLAY", false)) + new_state_ok = 1; + break; + +@@ -793,7 +793,7 @@ gettermname (void) + resettermname = 0; + if (tnamep && tnamep != unknown) + free (tnamep); +- if ((tname = (char *) env_getvalue ("TERM")) && ++ if ((tname = (char *) env_getvalue ("TERM", false)) && + (init_term (tname, &err) == 0)) + { + tnamep = mklist (termbuf, tname); +@@ -992,7 +992,7 @@ suboption (void) + unsigned char temp[50], *dp; + int len; + +- if ((dp = env_getvalue ("DISPLAY")) == NULL) ++ if ((dp = env_getvalue ("DISPLAY", false)) == NULL) + { + /* + * Something happened, we no longer have a DISPLAY +@@ -1727,7 +1727,7 @@ env_opt_add (unsigned char *ep) + env_opt_add (ep); + return; + } +- vp = env_getvalue ((char *) ep); ++ vp = env_getvalue ((char *) ep, true); + if (opt_replyp + (vp ? strlen ((char *) vp) : 0) + + strlen ((char *) ep) + 6 > opt_replyend) + { +@@ -2484,7 +2484,7 @@ telnet (char *user) + send_will (TELOPT_LINEMODE, 1); + send_will (TELOPT_NEW_ENVIRON, 1); + send_do (TELOPT_STATUS, 1); +- if (env_getvalue ("DISPLAY")) ++ if (env_getvalue ("DISPLAY", false)) + send_will (TELOPT_XDISPLOC, 1); + if (eight) + tel_enter_binary (eight); diff --git a/meta/recipes-connectivity/inetutils/inetutils_2.7.bb b/meta/recipes-connectivity/inetutils/inetutils_2.7.bb index a3b0b207683..eb8b669e7ca 100644 --- a/meta/recipes-connectivity/inetutils/inetutils_2.7.bb +++ b/meta/recipes-connectivity/inetutils/inetutils_2.7.bb @@ -22,6 +22,7 @@ SRC_URI = "${GNU_MIRROR}/inetutils/inetutils-${PV}.tar.gz \ file://CVE-2026-24061-02.patch \ file://CVE-2026-28372.patch \ file://CVE-2026-32746.patch \ + file://CVE-2026-32772.patch \ " inherit autotools gettext update-alternatives texinfo From patchwork Fri May 8 07:11:44 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87731 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 7CEE4CD342F for ; Fri, 8 May 2026 07:13:01 +0000 (UTC) Received: from mail-wr1-f52.google.com (mail-wr1-f52.google.com [209.85.221.52]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.8184.1778224371149030734 for ; Fri, 08 May 2026 00:12:51 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=fX8DzIFm; spf=pass (domain: smile.fr, ip: 209.85.221.52, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f52.google.com with SMTP id ffacd0b85a97d-452169ae568so1267367f8f.3 for ; Fri, 08 May 2026 00:12:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224369; x=1778829169; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=cOYmxi2KvIyO76HrRhh1luc7DMLT1hvj1j/n+EMdIWY=; b=fX8DzIFmPlmfw3fsnxTVoaXHogZfzjXvdO56MTU0W3EyglabZwZcXYyoN0BxdwzbBE JPnNljpYld5xGDxhFgVf9M4S7oerR6h2HYLnAC4OpwPYHZHmzs1abSTnKvoGuMfgoa/N LDCF7+tjqqaYxXOXrcnQoIw0ti4zkLa/prl/0= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224369; x=1778829169; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=cOYmxi2KvIyO76HrRhh1luc7DMLT1hvj1j/n+EMdIWY=; b=PpTNCrPEmGEWPi296/Ivvs6TlEZHuSvK7X0Fu6WjOMbeU1+U6bxxHjS4QdCl6Refq2 SQacnc/c5/tHH4XS0p0SLS6icPMllY4vKZdVCyCqtHVSb1jMI3MWF4ou6pPB4a/mIoii 3r5aK7ll4C8h68n0eDzmrFNLSaNrqlChVy2ygWEBWMJRmE+vZuGUVekWUtfVFaGSX6P0 io2XygTYXWFNjNpC7B7i7vQMCvXzlnOyvHHB5g5d1qGRZ1k9kLLyQ3VtmXGTUH4ieytv 0z8MHiyP9ftyLbZXpRcbAsgx1sK1kF7PDemADHp2r3yoXiyCK8DW1HUQ97RE0S64Q69q UhaA== X-Gm-Message-State: AOJu0YyGyL04GaxMJfYbgFJ0Co/cwQqi2VP6O9T5Zy5+pdU2/NRYE5Fx KVY8Kur1TRwk0r8NLcSBhuLH1jV2hy2S/6PEEgF373wwdwvT75T3xzqymnFJ9RAMp9Se5Pvlafa kuiR4MXs= X-Gm-Gg: Acq92OFM6rxq1aSjfnLWh4APmNMEkw65tVofh0P/bfAuHw+tC8DfDEHWLyIjdboSzho NuvhtPwWwgFU+OXkFdCSr1aOrLIdeLNrt+lBNd2oMpi7ZrFXiq8JsmkNE58ms2NRDzdK9c+wF7F TTWKOY2NP6BakAtTHTceKGYHs5JL6789iiHwXOpFGRGJ45UEFchWVjpzAT0NEbzjfBIfzsCnGEW J9zTriAgni9WuOHsKHoFhsnUUktFFFrlpLhPJsUtrWfk9mzxyCBVIuNYRIeZmuEIfop8RTrvw2N ZyCegpsrHF/I7opLocpKUIQ6eGQPX3FdDE+vEEg0i8Ll+8ojkBqO8euwyEf/uGVpKg5RUhHE7R+ ZLSyHYPMWHD1/Lc6WabXlpX/acnnVB3xalijCrSkOlppmVQNfyB3ZOzJfZdxBdJx95Ki7J1koM7 K7BBTc/2VIoeJmG0kfo89C57YoUgkcj7nrqRpv+mkiE5yJWsrMHuOod8+kxBPxF8ESCuVwIb2GV rorG/zGWZH4CVfhBriU4OsR0k/sTA0Do57jTQ== X-Received: by 2002:a5d:5d87:0:b0:43d:d037:d59c with SMTP id ffacd0b85a97d-4515b524224mr17875617f8f.16.1778224369199; Fri, 08 May 2026 00:12:49 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.48 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:48 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 51/52] devtool: Disable gpg signing when setting up source tree repos Date: Fri, 8 May 2026 09:11:44 +0200 Message-ID: <338f6ba133dbf9e75c6155b37aca9abf79f806cf.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:13:01 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236693 From: Moritz Haase This stops 'devtool modify foo' from failing with an error message like ERROR: Execution of 'git -c user.name=\"OpenEmbedded\" -c user.email=\"oe.patch@oe\" commit -q -m "Initial commit from upstream at version 1.90.0"' failed with exit code 128: error: cannot run ssh-keygen: No such file or directory error: fatal: failed to write commit object when GPG signing is enabled in the git configuration. (cherry picked from commit b5c84b07b87eafb4f68f7662b6cf26d8b73e3247) Signed-off-by: Moritz Haase Signed-off-by: Richard Purdie Signed-off-by: Yoann Congal --- scripts/lib/devtool/__init__.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/lib/devtool/__init__.py b/scripts/lib/devtool/__init__.py index cb727f324f4..f47f57c465d 100644 --- a/scripts/lib/devtool/__init__.py +++ b/scripts/lib/devtool/__init__.py @@ -200,7 +200,7 @@ def setup_git_repo(repodir, version, devbranch, basetag='devtool-base', d=None): bb.process.run('git add -f -A .', cwd=repodir) commit_cmd = ['git'] oe.patch.GitApplyTree.gitCommandUserOptions(commit_cmd, d=d) - commit_cmd += ['commit', '-q'] + commit_cmd += ['commit', '-q', '--no-gpg-sign'] stdout, _ = bb.process.run('git status --porcelain', cwd=repodir) if not stdout: commit_cmd.append('--allow-empty') From patchwork Fri May 8 07:11:45 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 87732 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 7ED86CD37AA for ; Fri, 8 May 2026 07:13:01 +0000 (UTC) Received: from mail-wm1-f41.google.com (mail-wm1-f41.google.com [209.85.128.41]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.8185.1778224371835939737 for ; Fri, 08 May 2026 00:12:52 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=AJLRYvPU; spf=pass (domain: smile.fr, ip: 209.85.128.41, mailfrom: yoann.congal@smile.fr) Received: by mail-wm1-f41.google.com with SMTP id 5b1f17b1804b1-488ab2db91aso18700745e9.3 for ; Fri, 08 May 2026 00:12:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1778224370; x=1778829170; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=YD1Cdt1AWG1xGklrjSwxo+9KAwKDqSSnk/0GYzG0bvQ=; b=AJLRYvPU3JVKAviotinONwl7DlVck46cnz02ShYjiWJQGHQoOuJXg6N2kVkrmBbzbk Kxow6ITYlEp7inFDr0P0Vjh75mM1sLPpVwhD1q7K57JjaC3g57qWQfV7lWoJgWgXHiAH oQh1HRQubZKPXpTLxhzjzlqe/sXzHahcs1jQg= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778224370; x=1778829170; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=YD1Cdt1AWG1xGklrjSwxo+9KAwKDqSSnk/0GYzG0bvQ=; b=SqrZGk6RS4XWMPhpFZE2XcrCj7Mg+UbQktyfx4RFil57+O8b37XbI0f1KAdRi9tGQy RxZpIJ+6NByL3ONSZD1fGTiyQtuQ/qyEgzFcg/7C2VWA/0ufDO7vARJHZ5EUWo3H5K0n Lrc3CYQ+i6TFCO4hGw8NKQyMx4LCfP+GlDLo8GOnbzDsbPeU09SrBFhdKL6BpEisMoon vjGyWO2JXQzSvfGkV+1/824igeg0HeIOUovbdUHpB1zhJnzaAEpAtpsqOEYJm9GRDkbd g7n9ErTO+CqFyp4jkRpHI9mUWmJH4eCDWH9QKqgLtn4OSlQnEDgm7xAmHH0VNW45TWRN u+OA== X-Gm-Message-State: AOJu0YyepE5TGeq2rK8Tx1MsaFeBObR2rtlZq/ipumGnmGaVLEYYhSTw A0SilN+zPicDbtgCHvzwFAW3CLDxCJsQ29RRmKZqbv+0V/h0DRrLLBNlxUTShn8WIXn2AyWYCKO kfIc2zKI= X-Gm-Gg: AeBDieuatvBNz+Aq8h0R1+uGVtz6I1JgJmgz6OzlJ6lDCerIgYLoRpsQuWtKaqCdpFb xCjF68svg4IoONDkMs5CKiz6HNzPkGqgJIflnSJaFA8/xjU0YYPbAC+MUuC2JPr2oF5tZ42x6vg g77zslOXXee4sEqVvUxEYeo/JvAIq29FV9wgsoEceJpRVNYStB43hNzEffl0WpsS4nTutK5RgcP GVG6+O4bZG/OTZT6eQfRCwU5vkB+cMN5kpqjB/T2GaNzl1+67k71Y9kqClh1UrPB6FiLIcrlUPW Qs/u5qIuMYEy3tqXKd8j63vpKbOSjcfWB+EEvtALNFmbEfijt7WEM4qCRwpPy4jmli5On/BFcrv MjVC4RA+3GMg4AIL5KxqzDsQ56pK9sa6ImJb+Eiqdbp1OjxgL8sYp+OEWJ2zyB2KNZbsLlyYo6G adwbSmgFs6Y/rpsKwMp2HoeCdSNtksVZ+bTk1eIP02H8VpSfFohV/be4nknylVWFs40gwMJTvpp YHZj5gNRYipXZdeiwTAHJSVJrBT80jSKHZgeQ== X-Received: by 2002:a05:600c:c0c1:b0:48a:56de:d62a with SMTP id 5b1f17b1804b1-48e51e1ddb2mr131827455e9.11.1778224369760; Fri, 08 May 2026 00:12:49 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4548ec6be40sm2415545f8f.12.2026.05.08.00.12.49 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 00:12:49 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 52/52] glibc: Fix recipe bug that disabled stack protector Date: Fri, 8 May 2026 09:11:45 +0200 Message-ID: <833809129ca29ea168f68c98468a2c70182a4d66.1778198557.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 08 May 2026 07:13:01 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236694 From: Ivan Nestlerode Fixes [YOCTO #16265] The glibc recipe is supposed to be building with --enable-stack-protector=strong, but some CACHED_CONFIGVARS values are actually breaking this, causing glibc to be built with no stack protector at all. Remove these CACHED_CONFIGVARS values so that stack protector support is detected properly in do_configure and then enabled properly during do_compile. Full details are here: https://bugzilla.yoctoproject.org/show_bug.cgi?id=16265 Signed-off-by: Ivan Nestlerode Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie (cherry picked from commit 43f0602ede37428f3c35cf665bba934b84355240) Signed-off-by: Yoann Congal --- meta/recipes-core/glibc/glibc.inc | 3 --- 1 file changed, 3 deletions(-) diff --git a/meta/recipes-core/glibc/glibc.inc b/meta/recipes-core/glibc/glibc.inc index 30d93bca77a..dae087d53f6 100644 --- a/meta/recipes-core/glibc/glibc.inc +++ b/meta/recipes-core/glibc/glibc.inc @@ -21,9 +21,6 @@ CACHED_CONFIGUREVARS += " \ libc_cv_slibdir=${base_libdir} \ libc_cv_rootsbindir=${base_sbindir} \ libc_cv_localedir=${localedir} \ - libc_cv_ssp_strong=no \ - libc_cv_ssp_all=no \ - libc_cv_ssp=no \ libc_cv_include_x86_isa_level=no \ "